The Top AI Coding Agent Risks And How To Mitigate Them
AI coding agents are now writing and shipping code with far less human review. Is your security keeping up?
Veracode CISO Sohail Iqbal breaks down the top security risks of AI coding agents and agentic AI, and what security teams should put in place first. If code is written at machine speed, it has to be remediated at machine speed.
What you will learn:
- Why AI agents turn your software pipeline into a black box
- How an AI agent differs from a developer using an AI assistant
- The security blind spots of vibe coding
- How hallucinated packages open the door to software supply chain attacks
- How to manage agent identity, credentials, and repository access
- Why AI can chain several low-severity vulnerabilities into one critical risk
- The first control to put in place if your developers already use AI agents daily
Chapters:
0:00 Writing code at machine speed
0:38 What changes when agents ship code
1:17 Where the risk concentrates
1:40 AI agents vs. AI coding assistants
2:45 Vibe coding and what goes unseen
3:32 Hallucinated packages and supply chain attacks
5:00 Agent identity, credentials, and access
6:32 When multiple lows become one critical
7:52 The first thing to put in place
8:52 Attackers are using AI too
🔗 Learn more about the risks of AI coding here: https://www.veracode.com/resources/analyst-reports/2026-genai-code-security-report
💡 Subscribe for more insights on Application Security, AI Coding, and DevSecOps.
#AICodingAgents #ApplicationSecurity #VibeCoding