The Ultimate Guide to Application Security
A curated Australian edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Application Security.
What to know about Application Security
Application Security focuses on protecting software applications from vulnerabilities and cyber threats throughout their development and operational life cycles. This critical field addresses challenges such as runtime protection, secure coding practices, DevSecOps integration, API security, cloud-native environments, and mitigating attacks like DDoS, supply chain risks, and malicious bot traffic.
Exploring the latest stories in Application Security reveals how advancements like AI and automation are enhancing threat detection, vulnerability management, and developer workflows, while highlighting ongoing risks found in mobile apps, open source components, and cloud deployments. Readers can gain insights into best practices, emerging technologies, and strategies to safeguard applications against evolving cyber threats.
Whether you’re a developer, security professional, or business leader, staying informed about Application Security developments helps in building resilient software, maintaining compliance, and protecting user data in an increasingly complex digital landscape.
Australian Application Security News
Regional stories with direct local relevance
JFrog launches local AI security for developer laptops
Security teams can now spot unapproved AI tools on laptops before they reach central controls, as JFrog widens its software supply chain checks.
JFrog expands development lifecycle security for agentic era
Enterprises face fresh governance and compliance pressure as AI agents generate code faster than teams can secure and audit it.
DigiCert launches Quantum Central for post-quantum readiness
Many organisations are still at an early stage of post-quantum adoption, with most only planning or testing quantum-safe cryptography.
Beyond DevSecOps: Why Devs and SecOps must unite for API and AppSec protection
APIs are now a major attack surface, making shared context between developers and SecOps vital to spot real threats and avoid false alarms.
Cloudflare launches AI vulnerability defence with OpenAI
Security teams can now spot flaws under active attack sooner, as Cloudflare's new service adds temporary edge protections and AI patch suggestions.
CrowdStrike launches AI security tools for enterprises
The new products aim to help security teams detect AI-driven attacks, stop poisoned code and control autonomous agent access across systems.
Analyst Insights
Research and market analysis connected to Application Security
Contrast Security named leader in IDC DAST assessment
Fastly named Leader in IDC MarketScape WAAP assessment
Broadcom launches TrueSource to bolster open source security
DigiCert launches Quantum Central for post-quantum readiness
Netskope launches control to block risky AI agent actions
Featured News
JFrog expands development lifecycle security for agentic era
Enterprises face fresh governance and compliance pressure as AI agents generate code faster than teams can secure and audit it.
Governance controls are crucial for AI adoption and modernisation
Trusted partners and tighter guardrails are becoming essential as AI agents expand the attack surface and put data sovereignty on the line.
.webp)
AI models expose new attack surfaces through misconfiguration
Misconfigured models are giving attackers a fresh route into cloud systems, raising the risk of data theft and service compromise.
Expert Columns
Cybersecurity finds problems. AI can accelerate remediation
Beyond DevSecOps: Why Devs and SecOps must unite for API and AppSec protection
Mathspace Breach Exposes 1 Million Students, Parents, and Teachers
AI closes vulnerability window as zero-day exploits surge
When AI memory, simulation and provenance collide
Supercharged security: Cyber risk in the age of frontier AI
The real cost of build vs. buy for agentic AI in regulated banking
Buying more tools won't scale your security ambitions, operational maturity will
A strategic blueprint for governing AI-enabled software development
Why ERP is not just another platform you can rebuild with AI code
Interviews
Interviews and video coverage from the network
JFrog expands development lifecycle security for agentic era
Governance controls are crucial for AI adoption and modernisation
AI models expose new attack surfaces through misconfiguration
Exabeam: Ruthless efficiency can make agentic AI malicious
Check Point Technologies: On vigilance, Mythos and beyond
Recent Application Security News
Sweet launches virtual patching for cloud & AI workloads
Security teams can now block exploit attempts on live cloud and AI workloads while permanent fixes wait to clear testing and release processes.
F5 & Oracle plan OCI security tie-up for AI threats
Cloud customers could gain extra protection against automated attacks as Oracle and F5 plan to embed web application and API security into OCI.
Barracuda appoints Dan Fletcher as Chief Financial Officer
The cybersecurity company is bolstering its executive team as it pushes into a new growth phase and seeks to capitalise on demand for its platforms.
CISOs lag on AI governance as board oversight trails
Many large firms still lack clear AI oversight, with just 7% of CISOs at companies above USD $10 billion in revenue owning the governance brief.
Endor Labs adds BYOK support for AI security scans
The new option should ease approval hurdles for regulated firms that need AI code scans without handing source code to vendor-selected models.
Sonatype launches Nexus Repository Pro+ for AI screening
It blocks malicious or policy-breaking software and AI artefacts at intake, helping enterprises cut build failures, rework and release risk.
Survey says annual pentest obsolete amid rapid code releases
Rapid release cycles are leaving many firms exposed between checks, with 90% of security and engineering leaders calling the annual pentest obsolete.
Annual pentest seen as obsolete by 90% of leaders
With software now shipping daily or faster, most leaders say periodic checks leave dangerous gaps between tests and fixes.
Meta's Muse AI agent seen in half of customer traffic
Security teams face a new attribution problem as Meta's Muse AI agent can slip into customer traffic while posing as an ordinary browser.
Recorded Future warns of rising Magecart attacks & exploits
Online checkout systems face greater risk as attackers increasingly hide skimming code inside trusted payment tools and services.
Tenable launches open AI partner network for security
Security teams can now connect exposure data with third-party AI tools to triage risks faster without building custom integrations.
Guardsquare opens first Asia-Pacific office in Singapore
Its Asia-Pacific revenue has been rising 50% a year as the mobile security group opens a Singapore hub for sales, support and engineering.
Tanium joins Microsoft AI security preview for MDASH
The limited preview could help uncover more complex vulnerabilities in Tanium's code, as Microsoft tests MDASH with a small group of partners.
Cycode launches workstation protection for developers
Malicious packages can now be blocked before they reach developers' machines, as supply chain attacks shift into AI-assisted coding workflows.
Microsoft warns AI is deepening cyber threat links
Threats are now spanning identities, cloud and software supply chains, with AI speeding attacks and complicating defence, Microsoft says.
TrendAI launches autonomous vulnerability discovery on AWS
The service keeps source code inside customers' AWS environments while using human review to cut false positives and verify fixes.
Bitdefender launches AI Guardian beta for Mac agents
Mac developers using autonomous agents now get a free beta tool that blocks risky actions before tools, files or credentials are exposed.
Sectigo launches quantum readiness tool for enterprises
Governments and standards bodies are pushing firms to map cryptography now, as missing assets could leave them exposed to post-quantum risks.
StackHawk launches Wingman to fix flaws in AI coding
The tool aims to close security gaps left by AI-written code before vulnerabilities reach security backlogs or pull requests.
Orca launches AI partner platform to boost channel sales
Partners may win more business faster as Orca links rewards to lifecycle performance and uses AI to cut sales admin time.
.webp)
