BSIMM16 confirms: AI redefines AppSec

The BSIMM16 analysis warns that AI and LLMs are the defining challenge for application security, driving shifts such as increased use of attack intelligence, risk-ranking for AI-generated code, custom rules for automated code review, and a stronger emphasis on software supply chain security and SBOM adoption; organizations must adopt new architectures, automated validation and remediation workflows, and treat AI output like third-party software to manage the emerging risks and maintain AppSec maturity.