Rapid AI-driven development makes security unattainable, warns Veracode
Summary
Veracode's annual State of Software Security report indicates that more vulnerabilities are being created than fixed, exacerbated by rapid AI-driven development. This widening remediation gap makes achieving comprehensive security increasingly difficult, according to the report based on data from 1.6 million applications.
IFF Assessment
The report indicates a negative trend in software security with vulnerabilities outpacing fixes.
Defender Context
Defenders need to focus on secure coding practices, automated security testing, and rapid remediation strategies to address the increasing number of vulnerabilities. The trend towards AI-driven development requires integrating security into the development lifecycle (DevSecOps) to mitigate risks and ensure applications are secure by design.