New data from Veracode, Stack Overflow, and METR confirms that AI tools have made prototyping cheaper but not production, with Veracode's 2025 GenAI Code Security Report finding that LLMs introduced k…
AI-assisted pull requests contain 1.7 times more issues than purely human-written code, according to CodeRabbit's State of AI vs Human Code Generation report analyzing 470 real-world GitHub pull reque…
OpenAI released the Codex Security CLI as open-source code this week, but the underlying vulnerability scanner remains a limited beta for approved customers. The tool, previously called 'Aardvark,' ha…
Veracode's 2026 GenAI Code Security Report found that AI-written code fails security tests 44% of the time, with an average security pass rate of 56% across more than 100 models tested. The failure ra…
GitLab 19.2, released July 16, introduces four AI agent features to automate security remediation, including Security Review Flow and Dependency Scanning Auto-Remediation in public beta, and GitLab Du…
AI coding assistants like GitHub Copilot are introducing security vulnerabilities at an alarming rate, with Veracode's 2025 GenAI Code Security Report finding that AI introduces a security vulnerabili…
Cursor, Bolt, Lovable, and GitHub Copilot AI coding assistants frequently generate CORS middleware that reflects the incoming Origin header with credentials enabled, creating a critical vulnerability …
Georgia Tech's Systems Software and Security Lab has confirmed 74 CVEs directly attributed to AI-generated code in 2026, with the actual number estimated at 400 to 700 cases in the open-source ecosyst…
GitHub has shipped a pre-commit vulnerability scanning feature for Copilot, available to all subscribers including Free tier users. The slash command scans uncommitted diffs for five OWASP vulnerabili…
AI coding tools like Claude Code, Cursor, and Codex are generating functional code that often contains security vulnerabilities, according to multiple reports from Veracode, CodeRabbit, and Apiiro. Th…
A security analysis by DryRun Security found that 87% of pull requests from AI coding agents contained at least one vulnerability, while Veracode's report showed 45% of AI-generated code samples have …
AI-generated code has turned security debt into a governance problem, according to a CyberScoop analysis. The Veracode 2025 GenAI Code Security report found that AI coding tools produce insecure code …
AI-assisted 'vibe coding' is causing a surge in security vulnerabilities and leaked secrets, with developers producing code at three to four times the rate but introducing security flaws at ten times …
AI-generated code now accounts for 51-75% of weekly output at two-thirds of tech firms, with 45% of AI-written code containing security flaws, while the average time from bug disclosure to exploitatio…
Markup launches a hosting platform for AI-generated HTML files from tools like Claude, ChatGPT, and Gemini, allowing users to store, share, and control access to decks, reports, and dashboards without…
GitLab's 2026 AI Accountability Report found that 92% of development teams face governance challenges with AI-generated code, and 34% of organizations experienced a production incident involving AI co…
A new report from Cobalt finds that support for fully automated pentesting among security professionals has plummeted from 29% to 9% in one year, as automated tools fail to detect critical vulnerabili…
Vibe coding—prompting an AI agent and shipping unread output—introduces a measurable defect tax that makes it unsuitable for mission-critical systems, with 45% of AI-generated code containing security…
A developer argues that the real danger of AI-generated code is not its quality but the unrecorded decisions it introduces, creating hidden technical debt. Drawing on Martin Fowler's debt quadrant and…
A developer at a company building create-microservices-app deliberately broke their own AI-built booking app to test whether automated contract checks catch plausible-but-wrong code. The experiment sh…