Ghosts in the machine: AI malware shows why it is time to extend Zero Trust to code
Software security was built around human development.
People wrote, reviewed and deployed code. Now machines are taking over.
In a recent paper, Anthropic reports that more than 80% of the code merged into its production codebase is authored by their AI model, Claude.
CEO of CodeHunter.
The same capabilities that make developers more productive are changing the economics of cyberattacks.
While adversaries still define the objective, machines can generate the payloads, test variants, adapt code to different environments and repeat the process at a velocity that security programs can’t match.
Speed is Marginalizing Security Controls
Most enterprise software security workflows assume there is time for review. Code is written, scanned, tested, approved and deployed. If something suspicious happens later, security teams investigate and respond.
That model breaks down when software moves from prompt to execution in minutes.
AI-generated code can become a script, dependency, automationjob or infrastructure change almost...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
