CFOtech Asia - Technology news for CFOs & financial decision-makers
Asia

Supply Chain Security Stories

Global Stories

Supply Chain Security stories

Google Cloud unveils AI security blueprint for GKE
Data Protection

Google Cloud unveils AI security blueprint for GKE

The framework targets CISOs and platform teams as they move AI systems into production, amid rising risks from prompts, models and outputs.

By Sean Mitchell • 4 min read • Last week
Google Cloud issues guardrails for AI vulnerability agents
Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • Last week
Google Cloud sets out AI security plan with Gemini & Wiz
Cloud Security

Google Cloud sets out AI security plan with Gemini & Wiz

Defenders could gain a faster edge against AI-driven attacks as Google Cloud ties Gemini, Wiz, CodeMender and Mandiant into one platform.

By Mark Tarre • 4 min read • Last week
Filigran warns AI security needs tighter human oversight
Data Protection

Filigran warns AI security needs tighter human oversight

Rising automation could speed cyber defence, but Filigran says security teams must keep humans in the loop as agentic AI spreads.

By Sofiah Nichole Salivio • 7 min read • Last week
GitLab 19.2 adds AI tools for security & workflows
DevOps

GitLab 19.2 adds AI tools for security & workflows

The update aims to cut review bottlenecks by auto-fixing vulnerable dependencies and surfacing code flaws scanners often miss.

By Joseph Gabriel Lagonsin • 4 min read • Last week
SecurityBridge launches SAPMAP to map attack paths
Data Protection

SecurityBridge launches SAPMAP to map attack paths

Security teams can now trace how one SAP flaw could spread across finance, payroll and supply chains, with access tightly restricted.

By Joseph Gabriel Lagonsin • 4 min read • Last week
CleanStart launches Clean Libraries to secure AI code
Application Security

CleanStart launches Clean Libraries to secure AI code

Developers face earlier checks on risky open-source dependencies as AI coding tools speed up software assembly and raise supply chain concerns.

By Joseph Gabriel Lagonsin • 3 min read • Last week
AI deserves our appreciation, but only if we're honest about what we're appreciating
Malware

AI deserves our appreciation, but only if we're honest about what we're appreciating

AI is speeding up attacks as well as defence, with high-risk prompts and unsupervised agents exposing firms to new security gaps.

By Robert Falzon • 4 min read • Last week
Arm expands Arteris security tools across CPU portfolio
IoT Security

Arm expands Arteris security tools across CPU portfolio

Security checks will now cover more Arm processors, as the chip designer broadens use of Arteris' Radix tool to spot flaws earlier.

By Sean Mitchell • 4 min read • Last week
Security leaders urge governance as AI reshapes defence
Data Protection

Security leaders urge governance as AI reshapes defence

Boards face rising pressure to control shadow AI as attackers automate faster and security teams shift to continuous verification.

By Sean Mitchell • 7 min read • Last week
AI leaders call for stricter governance & oversight
Software-as-a-Service

AI leaders call for stricter governance & oversight

Pressure is mounting on companies to prove AI is governed in real time, as agentic systems take decisions and access sensitive data.

By Mark Tarre • 9 min read • Last week
Targeted open source malware attacks on developers soar
Application Security

Targeted open source malware attacks on developers soar

Malicious package advisories jumped from 21 in 2023 to 1,576 in 2025, as attackers increasingly target developers before code reaches production.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Australian firms urged to boost cyber resilience, AI
Data Protection

Australian firms urged to boost cyber resilience, AI

Boards must now treat cyber security and AI governance as core resilience issues, with Russian-linked threats exposing wider operational risks.

By Sean Mitchell • 7 min read • Last week
Whatfix & JFrog split on enterprise AI trust & security
Software-as-a-Service

Whatfix & JFrog split on enterprise AI trust & security

Enterprise AI adoption will hinge on trusted workflows and stronger security controls as vendors warn governance gaps could slow rollout.

By Mark Tarre • 4 min read • Last week
Akamai joins WWT AI security model for NVIDIA systems
Data Protection

Akamai joins WWT AI security model for NVIDIA systems

The tie-up gives enterprises a layered way to secure AI systems without sacrificing performance, as demand for larger workloads grows.

By Mark Tarre • 4 min read • Last week
Mandiant warns on exposed Cloud Run serverless apps
Cloud Security

Mandiant warns on exposed Cloud Run serverless apps

Exposed serverless apps can let attackers steal tokens, read secrets and take over cloud projects if weak code is left unpatched.

By Mark Tarre • 4 min read • Last week

Stories from Other Regions

Supply Chain Security stories

NCC Group & Siemens team up on UK OT cyber security
Digital Transformation

NCC Group & Siemens team up on UK OT cyber security

Growing threats to UK critical infrastructure have pushed Siemens and NCC Group to join forces on protecting industrial systems from cyber attacks.

By Sean Mitchell • 4 min read • Last week
Cyber criminals are not breaking in - they're logging in
Data Protection

Cyber criminals are not breaking in - they're logging in

Breaches across New Zealand are increasingly exploiting human trust, with thieves using logins and one-time codes to steal data and funds.

By Tom Chan • 3 min read • Last week