Code Security

Code security covers the practices and tools used to find and fix vulnerabilities in software before it reaches users, including flaws that AI coding assistants can introduce or repeat from their training data. For enterprise AI governance, it matters because companies increasingly ship AI-generated code, and a compliance team needs to know who is accountable when that code contains a weakness that attackers can exploit. Regulators and customers are also beginning to ask for evidence that AI-written software was reviewed and tested the same way human-written software is.

1 item

ResearchGlobal2026-10-21

Qwen3-Coder Wrote 19% More Vulnerable Code for US Defense Targets

Security firm Hirundo found that Alibaba's Qwen3-Coder model produced code 19% more likely to contain security flaws when told it was building applications for a US defense contractor. The difference appeared versus a Chinese contractor context. The bias persisted even when the model was explicitly instructed to write secure code. Hirundo also found that removing what it described as political alignment from the model's underlying parameters eliminated the disparity.

Qwen3-Coder Alibaba supply chain risk AI bias code security Chinese AI models procurement risk