Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

veracode

GPT-5.6 Sol Shows Why a Better Model Isn't a Uniformly Safer Model

Aug 27, 2026 By Veracode Research In Veracode
Veracode Research’s latest secure-coding test finds GPT-5.6 Sol with a 15-point Python gain beneath modest aggregate movement, evidence that cyber capability and secure-code generation do not move in lockstep. OpenAI calls GPT-5.6 Sol its “strongest cybersecurity model yet.” Veracode’s extension test finds it scoring only two percentage points higher overall on secure-code generation than GPT-5.5, but it scores 15 points higher in Python.
Read Post
veracode

CISO Risk Intel Brief: Five-Day Exploit Windows, 72-Hour KEV Clocks, and the September Regulatory Squeeze

Aug 26, 2026 By Andrea Mazzarini In Veracode
This executive intelligence briefing covers from the past week (19-26 August 2026) and the past month (approximately 27 July–26 August 2026). Exploit velocity has overtaken patch cadence as the binding constraint. VMware vCenter moved from Broadcom patch to mass exploitation in five days, and this week’s CISA KEV due dates are measured in 72 hours, not 30 days.
Read Post
veracode

Comparing Software Supply Chain Security Vendors: Key Criteria

Aug 25, 2026 By Natalie Tischler In Veracode
If you’re comparing software supply chain security vendors in 2026, the market can feel deceptively crowded. Many platforms now claim broad coverage. Many specialists still lead in critical niches. And nearly every vendor can produce a long feature checklist. That is exactly why buyer discipline matters more than ever.
Read Post

AWS Security Live from Black Hat 2026 with Johnny Wong from Veracode

Aug 21, 2026 By VERACODE In Veracode
In this episode, hosts Ryan and Brian are joined by Johnny Wong, VP of Solutions Architecture at Veracode, to explore how AI-assisted “vibe coding” is changing the way software gets built—and the new security risks that come with it. While large language models are making developers faster and more productive, studies shared in the discussion show that a significant portion of AI-generated code still contains security vulnerabilities, raising concerns about scale and speed in modern development pipelines.
View Video
veracode

CISO Risk Intel Brief: Material Exposures, Control Gaps, and Program Response

Aug 19, 2026 By Andrea Mazzarini In Veracode
This executive intelligence briefing covers two distinct horizons: the past week (12–19 August 2026) and the past month (approximately 20 July–19 August 2026). It prioritizes AppSec, software supply chain, state-actor activity, cloud/IaC, identity, ransomware resilience, and regulatory developments with board-level implications. Analysis focuses on residual risk, control effectiveness, and business enablement rather than volume metrics alone.
Read Post
veracode

Managing LLM Code Security at Scale with Hybrid SAST

Aug 18, 2026 By Pete Zavlaris In Veracode
The amount of code being generated in the era of AI is staggering, and some non-trivial percentage of that code is insecure. According to the 2026 GenAI Code Security Report, roughly 44% of AI generated code test produced a known vulnerability. Organizations are more reliant than ever on cybersecurity programs that can scale at the velocity of AI while still managing risk with guardrails, governance, and compliance standards.
Read Post
veracode

Who Authorized That Tool Call?

Aug 12, 2026 By Chris Wysopal In Veracode
Veracode I have been going to Black Hat for more than 25 years, and I have spent many of those years on the Review Board. New technologies keep changing the shape of the systems we secure. The questions I find myself asking stay remarkably familiar. Where does untrusted data enter? What authority does a component have? Which boundary controls a sensitive operation? How do we know that control worked?
Read Post

Meet Captain Veracode | Guardian of Secure Code

Aug 11, 2026 By VERACODE In Veracode
In the year 2079, vulnerabilities are endless and breaches are a daily reality. Jordan Kodak, a weary engineer, dreams of a world where developers can innovate without fear. She leaves Earth in search of Secura Prime—a legend of flawless code—and decades later receives a distress signal from a temporal anomaly. Meet Cipher, a sentinel from 2177, where secure coding finally took root. Armed with future knowledge, Jordan realizes the utopia she sought isn’t a place… it’s a practice.
View Video
veracode

Java Source Code Scanning that Works the Way You Do

Aug 11, 2026 By Natalie Tischler In Veracode
Many tools fail to adapt to diverse developer use cases, leading to workflow interruptions in IDEs and CI pipelines. Managing dependencies for multi-module projects can be complex and time-consuming, often causing delays. And developers frequently work across varied environments – whether it’s IDEs, CI pipelines, or repositories, each with unique requirements. These challenges create friction and slow down the development process, making it harder to deliver secure applications on time.
Read Post
veracode

CISO Risk Intel Brief: Application Risk Intelligence for Early August 2026

Aug 5, 2026 By Andrea Mazzarini In Veracode
Senior security leadership continues to confront a dual acceleration: self-propagating software supply-chain worms that weaponize developer credentials at unprecedented velocity, and the persistent security debt introduced by AI-generated code. This briefing synthesizes material developments across the most recent seven days and the preceding thirty days, framed strictly around residual risk, control effectiveness, and business enablement.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.