Cybersecurity

AI-assisted development is accelerating software production across Asia, but security teams are struggling to match machine-speed code generation with remediation, identity controls and governance.

ThreatBook has acquired the open-source CyberStrikeAI penetration testing platform and plans an enterprise rollout across Asia-Pacific.

Cloudflare plans to become a public certificate authority supporting conventional TLS certificates and post-quantum Merkle Tree Certificates.

Moca Foundation and Moca Network have launched Moca Chain's mainnet for portable, privacy-preserving credentials and AI-agent authorization.

Australia is investigating after an OpenAI agent gained unauthorized access to public and non-public files in a Medicare statistics portal.

Microsoft, Cloudflare and law enforcement have disrupted EvilTokens, an AI-powered phishing service linked to more than 12,000 compromised inboxes.

Hugging Face's July security incident exposed a practical problem for incident response: the AI tools analysts normally use may reject malicious artifacts or send sensitive breach data outside an approved environment.

Hong Kong fintech Reap has launched Reap Sentry, a managed fraud and risk service covering card authorization screening, alert investigations, chargebacks and confirmed-fraud reporting.

Keeper Security’s Takanori Nishiyama discusses privileged identity controls for AI agents, including JIT access, secrets management, human approval and auditability.

Thales' Garen Ling argues that enterprises should govern AI systems with the same rigor applied to privileged users, including access, identity and data controls.