What happens when AI can write software in seconds but lacks the context to understand whether the code it creates is built on secure foundations?

In this episode of Business Tech Perspectives, I speak with Brian Fox, Co-Founder and CTO of Sonatype, about the growing pressure facing software teams as AI accelerates development while cyber threats continue to evolve. Brian brings a unique perspective from his work overseeing Maven Central and helping organizations understand the risks hidden inside modern software supply chains.

Our conversation begins with a challenge that many organizations may not fully appreciate. While AI coding assistants are becoming increasingly capable, the information they rely on can already be months old. Brian explains why that matters when selecting open source dependencies and how outdated recommendations can leave security risks buried inside applications long after they are deployed.

We also discuss the role open source software now plays in almost every application. Developers can build products faster than ever by using existing components, but that speed comes with responsibility. Brian shares why understanding what is inside your software has become a business issue as much as a technical one.

Another major topic is the expected surge in vulnerability discoveries driven by new AI capabilities. Brian warns that both attackers and security researchers now have access to tools that can identify weaknesses at unprecedented speed. The result could be a flood of vulnerability reports that challenges maintainers, vendors, and security teams alike.

The discussion also covers the changing state of vulnerability intelligence. With NIST narrowing its focus and public resources under strain, organizations may need to rethink how they gather information, assess risk, and prioritize remediation efforts.

Throughout our conversation, Brian offers practical advice for leaders who want to prepare their organizations for what comes next. From understanding software bills of materials to improving patch management processes, he explains why preparation today could make all the difference tomorrow.

Despite the challenges, Brian remains optimistic about the future. He believes AI will help developers create software faster and help the industry address years of accumulated security issues. The question is whether organizations can adapt quickly enough to keep pace with the changes already underway.

How confident are you that your organization could identify, assess, and respond to a major software supply chain issue today, and are your teams prepared for the increase in vulnerabilities that AI may soon uncover?