AI coding is putting software risk on steroids

image via TechRadar

August 26, 2026, 10:28 AM

• •The piece says AI-assisted coding compresses development timelines from weeks or months to hours.
• •It argues that faster software assembly using open-source code, APIs, and third-party services increases complexity and attack surface.
• •Veracode's 2026 State of Software Security report is cited as finding that 82% of organizations carry security debt and 60% carry critical security debt.
• •Third-party code is described as accounting for 66% of the most dangerous long-lived vulnerabilities.
• •The author says governance must shift from manual review toward automated risk analysis, dependency evaluation, pipeline policy enforcement, and business-risk-based remediation.

The article argues that generative AI is dramatically accelerating software development while security and governance processes remain comparatively slow. It says this mismatch is expanding organizations’ attack surfaces through faster use of first-party code, open-source components, APIs, and third-party services. Citing Veracode's 2026 State of Software Security report, the piece says 82% of organizations carry security debt and 60% carry critical security debt, with third-party code responsible for 66% of the most dangerous long-lived vulnerabilities. The author contends that organizations need automated, machine-speed governance focused on continuous evaluation, policy enforcement, and risk-based remediation to keep software trustworthy.

Read original article