Security Teams Are Fixing Vulnerabilities Faster Than Ever. So Why Is Software Getting Riskier?
DevOps.com, Tuesday, October 6th, 2026
Remediation is faster, but AI agents make dependency choices at scale; teams should surface security data at selection time.
This DevOps.com piece notes that the median age of unresolved critical and high vulnerabilities fell 59% from its January 2024 peak, and over half of resolved violations are fixed within a day.
Yet applications keep accumulating risk because AI coding assistants and agents compress hundreds of dependency decisions into shorter cycles, straining controls that scan only after a component is chosen.
The author urges surfacing vulnerability, policy and component-health data at selection time, giving agents the same guardrails as developers, and automating safe upgrade paths.