news.blackduck.com AI Governance Gap Poses Risks for Software Development
Article Content
- •97% of enterprise software engineers use AI coding assistants, but only 30% have governance.
- •Nearly 90% of teams face issues with AI-generated code, leading to bottlenecks and security risks.
- •Governance is essential for improving efficiency and mitigating operational risks in AI development.
A recent survey by Black Duck reveals that while 97% of enterprise software engineers are using AI coding assistants, only 30% have full governance in place. This gap is leading to significant operational challenges, including security testing issues and review bottlenecks. Nearly 90% of teams are encountering problems with AI-generated code, which is shifting workload from creation to validation and testing stages. The report emphasizes the urgent need for organizations to operationalize AI governance to mitigate risks and improve efficiency. MSSPs and vendors are recognizing this gap, with companies like Check Point and Pax8 introducing AI security capabilities to help manage AI tools across environments. The findings highlight that governance is not just a compliance issue but a critical ROI multiplier for development teams.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing…