Veracode

🚨 NEW Veracode data: 52% of “secure” coding tasks from Claude Opus 4.7 have vulnerabilities. That’s a striking data point—and a clear reminder of where things are headed. #AI is dramatically accelerating software development. But it’s also increasing the volume of vulnerabilities we have to manage. As Veracode's Jens Wessling has said, when models are trained on imperfect code, they reproduce those patterns at scale. This is why the conversation is shifting from finding vulnerabilities to actually managing and reducing risk. Good breakdown in this Forbes piece. #AppSec #SecureCoding

Had the great honour to be invited to attend the The King's Trust 50th anniversary Garden Party today. It is amazing to think of the millions of young people helped by the charity, started 50 years ago when the, then Prince of Wales, used his resettlement fund from leaving the Navy to invest in businesses started by young people who had no normal access to finance and support. It was great to mix with my fellow volunteers and the young people that benefit from the charity as well as one or two well-known ambassadors! I have really enjoyed mentoring, training and helping young people over the past 13 years, so often from very difficult backgrounds and disadvantaged in society, but 3 things are common across all of them; they want to get to a better place, they want to give to rather than take from society and they all show remarkable resilience. Thanks to Veracode for allowing me the time to continue this work!

🚨 Despite rising security budgets, most organizations face a harsh reality: traditional defenses aren't working against modern threats. On 5/21 at 11am ET, join Sohail Iqbal (CISO, Veracode) and Steve Piper (Founder & CEO, CyberEdge) as they reveal data-backed strategies from 1,200 IT security professionals across 17 countries. You'll discover: ✓ Why traditional defenses fail against AI-powered attacks ✓ How to embed security without slowing development ✓ Practical steps to close the 58% AppSec implementation gap Register Now:

You know you wanna come work with me again!!! We are looking to hire a Senior CSM at Veracode!

The recent Axios attack went beyond a single package. Veracode found the same malicious payload spreading through additional packages via vendored dependencies—expanding the impact. Read the blog to find out more: #AppSec #SoftwareSupplyChain

One detail stands out in the discussion around AI and cybersecurity: speed. Veracode ’s Julian Totzek-Hallhuber notes that initiatives like Project Glasswing can connect vulnerabilities into complex attack paths much faster than before. This uncovers issues that have been missed for years. At the same time, organizations still average more than five months to remediate vulnerabilities. It means attack paths can be identified faster than they can be fixed, long-standing issues become immediately actionable, risk accumulates faster than most teams are structured to handle The time compression changes everything about how risk needs to be managed. #AI #CyberRisk #ApplicationSecurity

AI tools accelerate cloud deployments. They also scale configuration risks. Securing these automated environments demands exact semantic validation, not just basic syntax checks. Join Veracode 's Chris Wysopal and Anna Bacher at Black Hat Asia in Singapore on Friday, April 24th, at 10.20AM (SGT) for their session: "IntentGuard: Securing LLM-Generated Cloud Configurations Through Intent-Aligned Semantic Validation." They will present innovative solutions to secure AI-generated cloud configurations, showing you how to: - Validate complex outputs directly from LLMs. - Block structural flaws before they hit production. - Maintain precise security control over automated deployment pipelines. Equip your team with the analytical tools needed to build secure software from the start. Add this session to your Black Hat Asia agenda today. #BHASIA #CloudSecurity #AppSec #CyberSecurity

AI-generated code accelerates cloud deployments, but it also introduces configuration risks at an unprecedented scale. Securing these automated outputs requires more than basic syntax checks. You need semantic validation that aligns with your exact security intent. Join Veracode 's Chris Wysopal and Anna Bacher at Black Hat Asia in Singapore on Friday, April 24, at 10.20AM (SGT) for their session: "IntentGuard: Securing LLM-Generated Cloud Configurations Through Intent-Aligned Semantic Validation." They will detail an analytical approach to tackling LLM-generated vulnerabilities, helping you: - Analyze and validate complex cloud configurations directly from LLM outputs. - Enforce precise security intent across automated deployment pipelines. - Fix structural flaws before they reach your production environment. Add this session to your Black Hat Asia schedule and equip your team with the insights needed to innovate quickly and securely. #BHASIA #CloudSecurity #AppSec

AI is accelerating software development—and its vulnerabilities—at an unprecedented pace. The old question, 'Did we scan it?' is no longer sufficient in a world where software evolves at machine speed. In his latest blog, Veracode CEO Brian Roche explores why the future of cybersecurity lies in proving Software Trust. He outlines how organizations can shift from simply finding flaws to building confidence in every release, dependency, and AI-assisted change. This is the new bar for secure innovation. Are you ready to meet it? Read more: #Cybersecurity #AI #SoftwareTrust