CFOtech Australia - Technology news for CFOs & financial decision-makers
Australia

Container Security Stories

Global Stories

Container Security stories

Vercel launches public bounty to test sandbox escape
Virtualisation

Vercel launches public bounty to test sandbox escape

Researchers can claim up to USD $1 million for breaking Vercel Sandbox's isolation, as the cloud provider opens its boundary to public scrutiny.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Adfinis wins SUSE INNOVATE status for OpenBao work
Hybrid Cloud

Adfinis wins SUSE INNOVATE status for OpenBao work

The accreditation strengthens Adfinis's hand with customers seeking secure open source tools for hybrid cloud systems and digital sovereignty.

By Mark Tarre • 4 min read • Last week
Google adds cluster-wide network policy to GKE preview
Data Protection

Google adds cluster-wide network policy to GKE preview

The preview could help GKE users enforce cluster-wide security without clashing with namespace rules, especially in multi-tenant environments.

By Sean Mitchell • 3 min read • This month
Qualys launches InstaScan for faster vulnerability detection
Hybrid Cloud

Qualys launches InstaScan for faster vulnerability detection

Security teams could spot newly disclosed flaws within minutes as rising CVE volumes and faster attacks squeeze response windows.

By Joseph Gabriel Lagonsin • 4 min read • This month
Google Cloud boosts AI agent density with GKE sandbox
Virtualisation

Google Cloud boosts AI agent density with GKE sandbox

Tests on an n2-standard-48 virtual machine showed Google Cloud's sandbox and orchestration tweaks could cut per-agent costs by up to 75%.

By Sean Mitchell • 5 min read • Last month
Lineaje launches AI vulnerability elimination factory
Application Security

Lineaje launches AI vulnerability elimination factory

The tool aims to help developers cut vulnerability backlogs and reach no exploitable flaws within 90 days as AI coding expands risk.

By Mark Tarre • 4 min read • Last month
BellSoft launches hardened Paketo builder for containers
DevOps

BellSoft launches hardened Paketo builder for containers

Security and compliance teams can now patch buildpack-based containers from a single hardened base, rather than chasing Dockerfiles across repositories.

By Sofiah Nichole Salivio • 4 min read • Last month
Hugging Face hit by AI agent intrusion in production
Robotics

Hugging Face hit by AI agent intrusion in production

Autonomous AI agents breached internal systems and exposed limited datasets and credentials, prompting Hugging Face to urge users to rotate tokens.

By Sean Mitchell • 4 min read • Last month
ASC-IT launches Darkmoon for private AI pentesting
Data Protection

ASC-IT launches Darkmoon for private AI pentesting

The platform lets security teams run AI pentests without exposing customer infrastructure data to external models.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Google Cloud issues guardrails for AI vulnerability agents
Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • Last month
Google open-sources k8s-aibom for live AI workload audits
DevOps

Google open-sources k8s-aibom for live AI workload audits

Security teams can now spot hidden AI workloads in live Kubernetes clusters, as Google's new tool also creates immutable ML bills of materials.

By Sean Mitchell • 4 min read • Last month
Google Cloud puts Cloud Run sandboxes into preview
Virtualisation

Google Cloud puts Cloud Run sandboxes into preview

Developers can now isolate AI-generated code and user scripts inside Cloud Run, reducing the risk of exposing credentials or host data.

By Sean Mitchell • 3 min read • Last month

Stories from Other Regions

Container Security stories

Broadcom adds AI security tools to VMware private cloud
Private Cloud

Broadcom adds AI security tools to VMware private cloud

Private cloud operators may cut hardware costs by a third as Broadcom folds AI-assisted threat prevention and API security into VMware tools.

By Sean Mitchell • 4 min read • This month
RapidFort launches runtime tool for production CVE checks
Application Security

RapidFort launches runtime tool for production CVE checks

Security teams can now track newly disclosed CVEs in live systems, as RapidFort expands its supply chain tools into production monitoring.

By Mark Tarre • 4 min read • This month
ArmorCode adds AI agents to Anya security platform
Cloud Security

ArmorCode adds AI agents to Anya security platform

The update aims to cut remediation costs and stop teams wasting time by re-analysing vulnerabilities without enough business context.

By Sean Mitchell • 4 min read • This month
NetRise adds package trust tools to Provenance platform
Application Security

NetRise adds package trust tools to Provenance platform

Open source package attacks can now be blocked earlier, as NetRise brings trust checks into editors, command lines and AI coding tools.

By Mark Tarre • 4 min read • Last month
Cycode launches agentic workflows for security teams
Application Security

Cycode launches agentic workflows for security teams

Security teams can now automate triage and remediation as risks emerge, with early access to AI agents that still require human oversight.

By Sofiah Nichole Salivio • 4 min read • Last month
RapidFort & ReversingLabs add security checks to libraries
Application Security

RapidFort & ReversingLabs add security checks to libraries

Enterprises can now vet open-source dependencies before build time, as the catalogue adds independent malware and vulnerability checks for Python and Java.

By Mark Tarre • 4 min read • Last month