Andrej Karpathy coined the term "vibe coding" in a 2 February 2025 post on X describing building software from AI prompts without reading the code, and Collins named it its Word of the Year 2025 on 6 …
Security experts warn that existing controls for human access are insufficient for AI agents, which operate at machine speed and can chain actions into unauthorized outcomes, as seen in recent inciden…
Veracode's Spring GenAI Code Security Update found that 45% of code generated by 150 large language models across 80 tasks contained known vulnerabilities, with security pass rates stuck at about 55% …
Veracode's 2026 GenAI Code Security Report, released July 28, found that AI-generated code passes security checks only 56% of the time across more than 100 models tested over two years, up just one pe…
A Veracode study found that 44% of AI-generated code contains at least one OWASP Top 10 vulnerability, and no model achieved a security pass rate above 68%, despite producing syntax-correct code 99% o…
At the RSA Conference, a panel on GenAI code security highlighted that decades of technical debt are colliding with AI-accelerated code generation, creating a 'vulnpocalypse.' Dave Aitel from OpenAI s…
A solo developer's weekend project NexusOS, built almost entirely with Cursor, failed not on code bugs but on deployment issues such as environment topology, migration ordering, and provider gaps, acc…
AI coding tools now generate 42% of committed code, projected to reach 65% by 2027, yet the security pass rate has stalled at 55% since 2023, according to Veracode's July 2026 GenAI Code Security Repo…
Veracode's July 2026 GenAI Code Security Report, which tested more than 150 large language models, found that only 55% of AI-generated code passes basic security tests, a figure unchanged since 2023, …
A Stanford randomized trial found that developers using an AI assistant wrote SQL-injection-vulnerable code 36% of the time versus 7% for the control group, yet rated their own code as more secure, an…
CodeRabbit has launched CodeRabbit Security, a tool that hunts application-specific vulnerabilities across the entire codebase, showing evidence and moving supported findings into remediation within t…
A 2025 Veracode analysis of over 100 large language models found that 45% of AI-generated code causes known security issues and vulnerabilities, while human review effectiveness drops after 400 lines …
New research from 1Password found that OpenAI's ChatGPT 5.5 and Anthropic's Claude Opus 4.8 successfully patched only 47% of six high-impact, high-complexity CVEs, often leaving vulnerabilities partia…
Veracode's 2025 GenAI Code Security Report found that large language models chose insecure coding methods in 45% of tests and failed to defend against cross-site scripting in 86% of relevant samples, …
New data from Veracode, Stack Overflow, and METR confirms that AI tools have made prototyping cheaper but not production, with Veracode's 2025 GenAI Code Security Report finding that LLMs introduced k…
AI-assisted pull requests contain 1.7 times more issues than purely human-written code, according to CodeRabbit's State of AI vs Human Code Generation report analyzing 470 real-world GitHub pull reque…
OpenAI released the Codex Security CLI as open-source code this week, but the underlying vulnerability scanner remains a limited beta for approved customers. The tool, previously called 'Aardvark,' ha…
Veracode's 2026 GenAI Code Security Report found that AI-written code fails security tests 44% of the time, with an average security pass rate of 56% across more than 100 models tested. The failure ra…
GitLab 19.2, released July 16, introduces four AI agent features to automate security remediation, including Security Review Flow and Dependency Scanning Auto-Remediation in public beta, and GitLab Du…
NXTG.AI published a governance-catch census for its live production multi-agent system on 2026-07-01, reporting at least 9 wrong state claims caught before shipping and at least 1 that reached a runni…