Agentic AI and software development: Here's how to get ahead of rising risk

This article examines how agentic AI will complicate AppSec across the SDLC, emphasizing rising risks such as dependency chain opacity, an expanded attack surface, and emergent behaviors as AI agents autonomously select dependencies and interact with numerous systems. It references emerging research on malicious AI models, points to new OWASP guidance, and recommends practical defenses including AI-aware monitoring of code generation and dependencies, automated security gates aligned with AI speed, human review checkpoints for critical changes, and sandboxed, governed environments to safely harness agent capabilities.