The Boring Stuff is Dangerous Now

Opinion: The article argues that widespread mandates to use AI coding tools combined with powerful agents that can map third-party trust graphs will increase discovery and chaining of obscure vulnerabilities, overwhelming security teams. It recommends focusing on transitive dependencies and data flows, prioritizing patching by trust-path risk rather than asset prestige, and remediating recurring implementation patterns while feeding intelligence back into AI tooling to reduce developer friction.