Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Top AI Coding Agent Risks And How To Mitigate Them

Oct 15, 2026 By VERACODE In Veracode
AI coding agents are now writing and shipping code with far less human review. Is your security keeping up? Veracode CISO Sohail Iqbal breaks down the top security risks of AI coding agents and agentic AI, and what security teams should put in place first. If code is written at machine speed, it has to be remediated at machine speed. What you will learn: Chapters: Subscribe for more insights on Application Security, AI Coding, and DevSecOps.
View Video
veracode

CISO Risk Intel Brief: Record Patch Volume, Edge Zero-Days, and AI-Accelerated Supply Chain Pressure

Oct 14, 2026 By Andrea Mazzarini In Veracode
This briefing examines material developments across the most recent seven-day period and the preceding thirty days. It is written for executive and board consumption and focuses on residual risk, control effectiveness, material exposure, and the practical implications for application security programs, software supply chain integrity, edge and identity systems, and the accelerating role of AI in both attack and defense.
Read Post
veracode

Best Practices in Maintaining HIPAA Compliance for Healthcare Applications

Oct 13, 2026 By Natalie Tischler In Veracode
If you build, own, or secure software that touches protected health information (PHI), you already know that HIPAA compliance for healthcare applications is not a box you check before a release and forget until the next audit. It’s a continuous operating requirement, and the gap between what most teams actually do and what HIPAA demands is widening fast.
Read Post
veracode

Application Security for PCI DSS Compliance: A Complete Guide

Oct 6, 2026 By Natalie Tischler In Veracode
If your organization stores, processes, or transmits cardholder data, then application security for the Payment Card Industry Data Security Standard (PCI DSS) is a discipline you sustain. And with PCI DSS v4.0.1 now in effect, the standard has stopped accepting passive, point-in-time testing as evidence of a mature security posture. It wants continuous proof.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.