The Ultimate Guide to Application Security
A curated Australian edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Application Security.
What to know about Application Security
Application Security focuses on protecting software applications from vulnerabilities and cyber threats throughout their development and operational life cycles. This critical field addresses challenges such as runtime protection, secure coding practices, DevSecOps integration, API security, cloud-native environments, and mitigating attacks like DDoS, supply chain risks, and malicious bot traffic.
Exploring the latest stories in Application Security reveals how advancements like AI and automation are enhancing threat detection, vulnerability management, and developer workflows, while highlighting ongoing risks found in mobile apps, open source components, and cloud deployments. Readers can gain insights into best practices, emerging technologies, and strategies to safeguard applications against evolving cyber threats.
Whether you’re a developer, security professional, or business leader, staying informed about Application Security developments helps in building resilient software, maintaining compliance, and protecting user data in an increasingly complex digital landscape.
Australian Application Security News
Regional stories with direct local relevance
DigiCert launches Quantum Central for post-quantum readiness
Many organisations are still at an early stage of post-quantum adoption, with most only planning or testing quantum-safe cryptography.
Beyond DevSecOps: Why Devs and SecOps must unite for API and AppSec protection
APIs are now a major attack surface, making shared context between developers and SecOps vital to spot real threats and avoid false alarms.
Cloudflare launches AI vulnerability defence with OpenAI
Security teams can now spot flaws under active attack sooner, as Cloudflare's new service adds temporary edge protections and AI patch suggestions.
CrowdStrike launches AI security tools for enterprises
The new products aim to help security teams detect AI-driven attacks, stop poisoned code and control autonomous agent access across systems.
SentinelOne brings Prompt Security to AWS Sydney for AI sovereignty
Local hosting in Sydney eases compliance worries for Australian firms using AI tools that may expose prompts, code and credentials.
JFrog clears IRAP check for Australian government use
Australian agencies can now assess JFrog faster, after the platform cleared a PROTECTED-level IRAP review for security approvals.
Analyst Insights
Research and market analysis connected to Application Security
DigiCert launches Quantum Central for post-quantum readiness
Netskope launches control to block risky AI agent actions
Akto named pioneer in Gartner's AI security quadrant
F5 named Market Shaper in Gartner AI security quadrant
Looking for cyber risk in the wrong places
Featured News
Governance controls are crucial for AI adoption and modernisation
Trusted partners and tighter guardrails are becoming essential as AI agents expand the attack surface and put data sovereignty on the line.
.webp)
AI models expose new attack surfaces through misconfiguration
Misconfigured models are giving attackers a fresh route into cloud systems, raising the risk of data theft and service compromise.
Expert Columns
Cybersecurity finds problems. AI can accelerate remediation
Beyond DevSecOps: Why Devs and SecOps must unite for API and AppSec protection
Mathspace Breach Exposes 1 Million Students, Parents, and Teachers
AI closes vulnerability window as zero-day exploits surge
When AI memory, simulation and provenance collide
Supercharged security: Cyber risk in the age of frontier AI
The real cost of build vs. buy for agentic AI in regulated banking
Buying more tools won't scale your security ambitions, operational maturity will
A strategic blueprint for governing AI-enabled software development
Why ERP is not just another platform you can rebuild with AI code
Interviews
Interviews and video coverage from the network
Governance controls are crucial for AI adoption and modernisation
AI models expose new attack surfaces through misconfiguration
Exabeam: Ruthless efficiency can make agentic AI malicious
Check Point Technologies: On vigilance, Mythos and beyond
Exclusive: Reco COO on securing the AI inside your SaaS stack
Recent Application Security News
Sectigo launches quantum readiness tool for enterprises
Governments and standards bodies are pushing firms to map cryptography now, as missing assets could leave them exposed to post-quantum risks.
StackHawk launches Wingman to fix flaws in AI coding
The tool aims to close security gaps left by AI-written code before vulnerabilities reach security backlogs or pull requests.
Orca launches AI partner platform to boost channel sales
Partners may win more business faster as Orca links rewards to lifecycle performance and uses AI to cut sales admin time.
Eve Security raises USD $7.5 million for AI agent tools
Growing concern over autonomous AI systems has helped the Austin-based startup secure fresh backing to expand sales and revenue growth.
StackHawk launches Wingman to fix AI coding flaws
It aims to help engineers close software flaws before pull requests are opened, as AI coding tools accelerate release cycles and security backlogs grow.
SHI warns firms to prepare for quantum security risks
Businesses may have only a few years to replace ageing encryption before quantum computers make current security methods vulnerable.
UNC6240 hits PeopleSoft flaw in global renewed attacks
Dozens of organisations worldwide face renewed compromise risk after attackers used an encoded path to slip past defences and hit Oracle PeopleSoft.
Secure Code Warrior launches AI literacy course for staff
With most firms using AI but few staff ready, the course targets non-developers handling sensitive data and automations at work.
Red Heron exploits Gitea flaw, uncovers SIXZUT rootkit
Attackers turned a newly disclosed Gitea flaw into automated intrusions within days, hitting systems in five countries and exposing source code and secrets.
Citrix adds AI browser session insights for agents
Security teams can now trace risky browser activity by staff and AI agents, as Citrix adds visual session records and policy guidance.
Demain warns of AI persistence after Medicare breach
The breach highlights how AI agents can keep probing blocked systems, prompting calls for stronger defences around identities, networks and data.
Fastly launches AI controls as machine traffic surges
Machine-generated requests now account for more than half of Fastly's network traffic, intensifying pressure to govern AI costs and security.
StackHawk launches Wingman to fix flaws in AI coding
Security teams may cut backlogs as Wingman finds, fixes and verifies flaws inside AI coding tools before pull requests are opened.
Azul launches AI assistant for Java security checks
IT teams can now spot unpatched Java versions and Oracle licensing exposure in live production data, cutting the risk of audit surprises.
Palo Alto launches continuous AI defence for clients
Attackers are exploiting AI faster than many defences can respond, prompting a shift to continuous testing for hidden exposures.
Akamai warns of blind spots in workplace agentic AI
More than 40% of enterprise users have installed AI browser tools, leaving security teams struggling to spot permission changes and rogue agents.
A10 launches AI Gateway for enterprise model control
Enterprises could get tighter control over AI spend and access as A10's gateway routes requests, tracks usage and enforces policy.
Fastly launches AI firewall & runtime control tools
Machine-generated traffic is driving up costs and security risks as Fastly adds controls for AI systems now moving into production.
Delinea joins Anthropic project to test identity security
It could expose faults in software that governs access to sensitive systems, with no customer data included in the AI-led testing.
Mandiant warns of AI agents fuelling new attack risks
Autonomous systems are now creating fresh avenues for code theft, remote execution and runaway cloud spending, Mandiant says.
.webp)
