CISOs accept operational risk to automate security remediation

Manoj Nair, who heads product innovation marketing at Snyk, reported that security backlogs have increased tenfold year over year, with eight new issues created for every one fixed. He stated that CISOs at Fortune 100 organizations are now willing to accept operational outages to prioritize the automated remediation of technical debt, a decision driven by the rise of autonomous AI attackers. Nair described the recent Mintos incident as a "margin call on your technical debt," noting that attackers can now automate the discovery of chained exploits. He argued that traditional application security models, which relied on human bandwidth and late-stage gates, are breaking down under the pace of agentic software factories. To address this, Snyk is shifting its approach from providing security context to human developers to providing it directly to coding agents. Nair highlighted that this method allows for real-time prevention of insecure code and malicious dependencies, such as "slop squatting," where agents hallucinate package names that are then exploited. He emphasized that this cultural shift requires organizations to move from individual developer accountability to shared organizational risk acceptance, treating the crisis of autonomous attackers as a necessary catalyst for change.