Computerweekly AI Tools Accelerate Vulnerability Discovery Amid Security Challenges
Article Content
- •AI tools cut vulnerability analysis time from nine months to 90 hours.
- •58% of teams ship code faster than security reviews can keep up.
- •Recent PHP2Shell vulnerabilities highlight the urgent need for effective security measures.
Recent studies reveal that AI tools are significantly speeding up the discovery of vulnerabilities in software, particularly in critical infrastructure. A report from Forescout indicates that AI reduced vulnerability analysis time from nine months to just 90 hours, uncovering 99 vulnerabilities, with 52% rated as high or critical severity. Meanwhile, a Linux Foundation study found that 58% of development teams release code faster than security reviews can keep up, and 60% report increased dependencies due to AI coding assistants. This rapid pace raises concerns about the security of code, as organizations struggle to vet new dependencies effectively. The findings highlight a growing gap between AI-driven development and security capabilities, emphasizing the need for improved security oversight. The urgency is underscored by the recent PHP2Shell vulnerabilities that prompted emergency patches and exploitation attempts shortly after disclosure.
Ask AI about this cluster
Answers cite the sources they use