Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

veracode

CISO Executive Briefing: Application Risk Intelligence for July 2026

Jul 29, 2026 By Andrea Mazzarini In Veracode
This briefing synthesizes verified threat activity, vulnerability disclosures, supply-chain incidents, and regulatory signals into a board-ready assessment of residual risk and control effectiveness for the period of 29 June to 28 July 2026. The analysis prioritizes AppSec, software supply chain, identity, cloud/IaC, API/web, ransomware resilience, and AI-related exposure.
Read Post
veracode

2026 GenAI Code Security Report: AI Is Writing More of Your Code but Security Hasn't Caught Up

Jul 28, 2026 By Natalie Tischler In Veracode
New GenAI code security research shows a stubborn truth: as AI is generating more of the code entering production, secure output is not improving at the same pace. The result is a GenAI code security challenge defined by scale, model choice, and the growing need for verification. AI coding has moved past experimentation. For many teams, it is now part of how software gets built every day. That’s the opportunity. It’s also the risk.
Read Post
veracode

Compliance Stopped Being a Checkbox. Most Companies Haven't Caught Up.

Jul 23, 2026 By Natalie Tischler In Veracode
For a long time, compliance meant paperwork. Fill out the right forms, pass the annual audit, file it away. Done. Now, your development pipeline is generating code at a pace no human team can review manually, your supply chain runs three layers deep into open-source packages and AI plugins you didn’t choose, and regulators are watching in real time. The old approach doesn’t just underperform; it creates a false sense of security.
Read Post

Why Continuous Attestation Is Critical in the AI Coding Era

Jul 22, 2026 By VERACODE In Veracode
In the age of AI coding, annual audits and snapshots are no longer enough. Discover **Continuous Attestation** — the practice of producing ongoing, verifiable evidence that your applications and pipelines are always running in a trusted, policy-conformant state. In this video, Anthony Barkley, Chief Strategy Officer at Veracode, explains why independence in attestation is critical for earning trust from regulators, customers, and boards — especially when AI agents are writing code.
View Video
veracode

CISO Executive Briefing: Operational Ransomware and Supply Chain Compromises Escalate as Agentic AI Threats Emerge

Jul 22, 2026 By Andrea Mazzarini In Veracode
This briefing analyzes verified developments over two horizons: the Past Week (July 15–21, 2026) and the Past Month (June 22–July 21, 2026). It draws exclusively from contemporaneous incident disclosures, threat research, and authoritative reporting. Analysis emphasizes material business risk, control effectiveness gaps, residual exposure in software supply chains, cloud/IaC environments, identity-adjacent vectors, and AI-adjacent workloads.
Read Post

80% of New Code is AI-Generated - But 40-50% Has Vulnerabilities Find out Why

Jul 21, 2026 By VERACODE In Veracode
Is your organization generating up to 80% of its new code with AI? You might be proud of the speed — but are you ready for the security risks? In this video, we reveal the hidden danger: multiple studies show that **40-50% of AI-generated code changes contain vulnerabilities**. Discover why AI coding is accelerating development faster than ever — and why traditional security approaches are no longer enough.
View Video
veracode

The Best Application Security Testing Tool Isn't a Scanning Tool Anymore

Jul 21, 2026 By Karen Buffo In Veracode
For years, the application security testing tool category was defined by a simple question: can it find vulnerabilities? The better the scanner, the better the tool. That model made sense (for the most part) when humans wrote every line of code and security teams could reasonably review what developers shipped. That model is now obsolete.
Read Post
veracode

Cyber Risk Intelligence Brief: Supply Chain Trust Erosion and Ransomware Velocity Require Preventive Control Discipline

Jul 15, 2026 By Andrea Mazzarini In Veracode
This CISO Executive Cyber Risk Intelligence Briefing covers the Past Week (July 8–14, 2026) and the Past Month (June 15–July 14, 2026). Analysis draws exclusively from verified incident disclosures, CISA KEV activity, threat intelligence platforms, and platform telemetry. Focus remains on material risk to AppSec posture, software supply chain integrity, cloud/IaC, identity fabrics, and business enablement.
Read Post
veracode

Erasing Security Debt with an App Risk Remediation Platform

Jul 14, 2026 By Natalie Tischler In Veracode
A risk remediation platform is the operational infrastructure that transforms security debt from an unmanaged backlog into a structured, measurable program. With 82% of organizations now carrying security debt and the average fix half-life sitting at 243 days, the gap between vulnerability discovery and resolution is where breaches happen.
Read Post
veracode

CISO Executive Briefing: Supply Chain Front-End Compromises and Sustained Third-Party Risk Elevation

Jul 8, 2026 By Andrea Mazzarini In Veracode
This CISO Executive Briefing analyzes material developments over two horizons: the past week (July 1–7, 2026) and the past month (June 8–July 7, 2026). Analysis draws exclusively from verified public disclosures, regulatory filings, threat intelligence platforms, and incident reporting. Focus areas include AppSec posture, software supply chain integrity, identity and contractor risk, cloud/IaC exposure, and the accelerating integration of AI into attacker TTPs.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.