CMOtech UK - Technology news for CMOs & marketing decision-makers
United Kingdom

Supply Chain Security Stories

UK Stories

Supply Chain Security stories

Global Stories

Supply Chain Security stories

1Password expands OpenAI Codex deal for secure credentials
Data Protection

1Password expands OpenAI Codex deal for secure credentials

The new integration keeps passwords out of prompts and repos, reducing the risk of leaks as AI coding agents move into production workflows.

By Sofiah Nichole Salivio • 3 min read • Last week
Black Kite says 58 CVEs pose critical supply threat
Security Operations Centres

Black Kite says 58 CVEs pose critical supply threat

Only a small fraction of disclosed flaws are likely to hit suppliers, leaving security teams to focus on the 58 highest-risk CVEs.

By Sean Mitchell • 5 min read • Last week
TAC Security adds Anthropic & Perplexity AI clients
Data Protection

TAC Security adds Anthropic & Perplexity AI clients

Independent security checks are gaining urgency as fast-growing AI and software firms face rising scrutiny from customers, partners and regulators.

By Sean Mitchell • 3 min read • Last week
GitLab 19.0 adds secrets manager & AI workflow tools
Private Cloud

GitLab 19.0 adds secrets manager & AI workflow tools

The release gives security teams and developers new controls for credentials, merge requests and supply chain oversight as AI use grows.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Spring developers lack container security knowledge
DevOps

Spring developers lack container security knowledge

Most Spring teams are exposed to container risks as 64% of respondents were unaware Dockerfile choices can affect security.

By Sean Mitchell • 3 min read • Last week
OpenSSF adds five members & new security resources
Application Security

OpenSSF adds five members & new security resources

Members are backing tougher open source security as OpenSSF expands guidance on regulation, Python coding and AI-driven vulnerability tools.

By Sofiah Nichole Salivio • 4 min read • Last week
Atsign AI platform wins Gold for zero-attack surface
Data Protection

Atsign AI platform wins Gold for zero-attack surface

Independent testing suggests enterprise AI can be deployed without exposed inbound ports, easing security concerns for firms handling sensitive data.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Saviynt named leader in four KuppingerCole reviews
Privileged Access Management

Saviynt named leader in four KuppingerCole reviews

The recognition comes as buyers demand unified controls for human, machine and AI identities across cloud, on-premises and core business systems.

By Mark Tarre • 4 min read • Last week
Zscaler launches AI-Guardian and expands Alstom partnerships
Software-as-a-Service

Zscaler launches AI-Guardian and expands Alstom partnerships

Businesses using AI agents may gain tighter controls as Zscaler adds new governance tools and deepens a decade-old partnership with Alstom.

By Sean Mitchell • 5 min read • Last week
AI security training surges as prompt injection tops list
Security Operations Centres

AI security training surges as prompt injection tops list

AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Origina launches OPTAS to protect unsupported software
Digital Transformation

Origina launches OPTAS to protect unsupported software

Enterprises running ageing systems may gain a safer alternative to patching, as the new service flags flaws before vendors disclose them.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Sage warns SMBs face cyber risk despite spending rise
Software-as-a-Service

Sage warns SMBs face cyber risk despite spending rise

Despite higher spending plans, half of SMBs reported a cyber incident in the past year, exposing a widening readiness gap.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Barracuda & CyberCert ease SMB1001 compliance for SMEs
Malware

Barracuda & CyberCert ease SMB1001 compliance for SMEs

SMBs in Australia and New Zealand could cut the cost and complexity of cyber certification through a new channel-led package.

By Mark Tarre • 4 min read • Last week
Anthropic model can chain bugs into exploits, Cloudflare
Cloud Security

Anthropic model can chain bugs into exploits, Cloudflare

The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.

By Mark Tarre • 4 min read • Last week
BeyondTrust named leader in KuppingerCole PAM report
Software-as-a-Service

BeyondTrust named leader in KuppingerCole PAM report

The ranking underscores growing demand for tools that secure human, machine and AI identities across cloud and hybrid environments.

By Joseph Gabriel Lagonsin • 4 min read • Last week
WD unveils post-quantum hard drives for enterprise
Encryption

WD unveils post-quantum hard drives for enterprise

Hyperscale customers are already testing hard drives designed to keep firmware and device trust intact as quantum computing threats grow.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Stories from Other Regions

Supply Chain Security stories

Why Australian SMEs can't afford to treat cybersecurity as an afterthought
Disaster Recovery

Why Australian SMEs can't afford to treat cybersecurity as an afterthought

Rising attack volumes are exposing under-resourced SMEs to downtime, lost contracts and regulatory risk unless security is built in now.

By Corp IT • 5 min read • Last week