A thousand vulnerabilities found – is this an audit report or real protection?
A thousand vulnerabilities found - is this an audit report or real protection? And is AppSec even necessary if the code is increasingly being written by AI? We will discuss these and other questions honestly and to the point on November 18 at Positive AppSec

Thousand Vulnerabilities Found is the focus of this technology update. A thousand vulnerabilities found – is this an audit report or real protection? And is AppSec even necessary if the code is increasingly being written by AI? We will discuss these and other questions honestly and to the point on November 18 at Positive AppSec Conf, the first Positive Technologies conference on secure development. The venue is Cyberdom in Moscow; there will be an online broadcast for remote participants. What we are talking about: 🤖 AI code generation: where development acceleration ends and product vulnerabilities begin 🔍 SAST/DAST/IaC scanners: what really reduces risks and what remains a formality for audit ⛓️ attacks through the supply chain and open-source libraries 😎 the transition from counting finds to assessing exploitability and business risk 💸 justification of the budget for AppSec through risks and payback For whom: AppSec and DevSecOps specialists, information security architects, CISOs and technical directors – each role in the program has its own topics. Format: offline + online, participation is free, registration is subject to confirmation. Register
What happened with Thousand Vulnerabilities Found
A thousand vulnerabilities found – is this an audit report or real protection? And is AppSec even necessary if the code is increasingly being written by AI? We will discuss these and other questions honestly and to the point on November 18 at Positive AppSec Conf, the first Positive Technologies conference on secure development. The venue is Cyberdom in Moscow; there will be an online broadcast for remote participants. What we are talking about: 🤖 AI code generation: where development acceleration ends and product vulnerabilities begin 🔍 SAST/DAST/IaC scanners: what really reduces risks and what remains a formality for audit ⛓️ attacks through the supply chain and open-source libraries 😎 the transition from counting finds to assessing exploitability and business risk 💸 justification of the budget for AppSec through risks and payback For whom: AppSec and DevSecOps specialists, information security architects, CISOs and technical directors – each role in the program has its own topics. Format: offline + online, participation is free, registration is subject to confirmation. Register
Why Thousand Vulnerabilities Found matters
The development is relevant to people building, using, or evaluating modern digital products. Its practical impact will depend on rollout details, availability, security considerations, and follow-up information from the companies or researchers involved.
What to watch next
Watch for official documentation, product availability, technical details, independent testing, security updates, and any changes that clarify how the development works in practice.
