ActiveState released a Linux Foundation study on AI’s impact on software security. It surveyed 172 security practitioners and found that 58% of teams ship code faster than security reviews can keep up. AI coding assistants increase external package use by 60%, but teams only check transitive dependencies about half the time. Respondents said AI tools caught 30% of the vulnerabilities they found and made security work 17% faster, though false positives raised workloads by 30%. The study urges dedicated AI security roles and policies that require human review of AI‑generated code.
Why it matters
Security teams may miss half of the new dependencies AI adds, increasing the risk of supply‑chain attacks.
