AI-Generated Code Poses Growing Malware Risk as Adoption Surges Among Developers

·1 views

Studies from 2025 and 2026 indicate that a large majority of AI-generated code contains security vulnerabilities, with 81% of samples on public forums flagged for flaws and 41% of malware incidents traced to AI-written code. Developers now rely on AI coding assistants for 62% of new code, according to GitHub data, raising the stakes for unreviewed AI output. Popular tools such as GitHub Copilot, Amazon CodeWhisperer, and Replit Ghostwriter all show measurable flaw-pass rates, with no tool reliably catching zero-day vulnerabilities. A reported April 2025 breach at Slack was linked to a Copilot-generated Python script that exposed an API token in plain text, costing the company an estimated $1.7 million in response costs. Security experts recommend pairing AI assistants with automated static analysis tools and mandatory human code review, as teams reportedly spend an average of $340 per month remediating AI-introduced vulnerabilities.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Collect Only Data You Can Protect, Security Principle Urges Developers

Software developer Serguey Shinder argues that every piece of stored data is not just an asset but a liability that must be actively protected. He proposes a simple rule: do not collect data you are not prepared to defend, shifting the question from 'might this be useful someday?' to 'is the potential value worth the responsibility?'. Shinder also highlights that data retention periods matter — information kept indefinitely becomes a forgotten, unguarded risk over time. He emphasizes that deleting data no longer needed is as important a security practice as protecting data that is still in use. The core principle is that the safest data is data never collected in the first place.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Tools Cut Cross-Platform Dev Costs and Testing Time, 2026 Data Shows

Artificial intelligence tools are significantly reshaping cross-platform app development, according to multiple 2026 industry reports. AI code assistants such as GitHub Copilot and Amazon CodeWhisperer reduce cross-platform code translation time by 46%, saving development teams an average of 17.5 hours per week, per Stack Overflow data. AI-powered testing platforms like BrowserStack and Sauce Labs have cut manual testing cycles by 63%, with Canva reporting a 54% drop in mobile regression bugs after adopting AI-driven testing. On the design front, AI tools are reducing UI rework by 41% on average, while AI localization engines enable app translation into 80-plus languages in under three minutes, with Booking.com reportedly saving $126,000 in translation costs across 42 simultaneous market launches. Despite these gains, experts caution against over-relying on AI in regulated sectors such as legal and medical apps, where context errors occur roughly 13% of the time.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Tools Cut Code Review Time by 64% and Boost Large Dev Team Output

Enterprise adoption of AI development tools has surged, with 81% of developers at large firms using them daily, according to 2026 industry data. AI-powered code review platforms such as GitHub Copilot and DeepCode are reported to reduce review time by 64%, shrinking pull request cycles from 5.8 days to 2.1 days for teams of over 25 engineers. Automation tools now handle up to 53% of routine code snippets, freeing senior engineers to focus more on architecture and system design. Poor documentation remains the top productivity blocker for 73% of enterprise teams, though AI writing tools are helping auto-generate and maintain docs at the CI pipeline level. Predictive task-routing tools and AI pair-programming bots are also showing measurable gains, with companies like Shopify and Canva reporting faster ticket resolution and quicker onboarding for new hires.

0 comments Read more at DEV Community

ProgrammingHacker News ·

Racter: Revisiting the 1984 AI Chatbot That Wrote a Book

Racter was an early artificial intelligence program released in 1984, notable for generating human-like prose and poetry through automated text. The program gained widespread attention after its outputs were compiled into a published book titled 'The Policeman's Beard Is Half Constructed.' It is considered a landmark in the history of generative AI and computational creativity. The program has been archived and remains accessible through UbuWeb, a platform dedicated to historical avant-garde and experimental works. The Hacker News submission linking to the archive attracted modest community interest.

0 comments Read more at Hacker News