This story is part of the 2026 iTnews State of Security Report. Read it for free here.<\/a><\/p>\n\u201cWith our vision to be global leaders in higher education comes a matching digital footprint, which includes half a million IP addresses,\u201d Bampton said.<\/p>\n
\u201cWhen you combine that with the innovation and collaboration appetite that is unique to higher education, cyber threats simply become a way of life.\u201d<\/p>\n
The university\u2019s developer community presents its own challenges, with skill levels ranging from experienced engineers to undergraduate students. Rather than enforcing a single set of tools, Bampton focused on ensuring consistent security outcomes.<\/p>\n
\u201cThey want to do the right thing, and application security is the enabler that helps them do that properly,\u201d he said.<\/p>\n
That approach is under increasing pressure as developers accelerate their work using AI tools. While Bampton said AI had improved the speed of identifying vulnerabilities, organisations were struggling to translate that into faster remediation.<\/p>\n
\u201cWe are dealing with pre-AI ways of working that weren\u2019t designed to fix problems in production \u2018yesterday\u2019,\u201d he said.<\/p>\n
\u201cIt has never been faster to identify vulnerabilities, but there is still a lag in the time to remediate.\u201d<\/p>\n
Recent developments such as Anthropic\u2019s Mythos had further highlighted this shift, demonstrating how generative AI could move upstream into application security. Bampton said the next step would be trusted AI-driven remediation.<\/p>\n
\u201cIt will only be a matter of time before AI is able to assess, review, and secure code,\u201d he said.<\/p>\n
\u201cBut for now, we are living in a world where AI is a force multiplier for delivering digital products, while the security aspects are still catching up.\u201d<\/p>\n
Despite these changes, Bampton said the fundamentals of application security remained unchanged, with communication and relationships playing a central role.<\/p>\n
\u201cThat starts with a conversation,\u201d he said.<\/p>\n
\u201cYou are not going to be able to help people if they don\u2019t know who you are or don\u2019t feel that you are approachable. It\u2019s about taking what is traditionally a technical problem and turning it into a marketing and awareness challenge.\u201d<\/p>\n
Communication was also a critical aspect when educating developers about the growing risks from software supply chains, particularly through open-source dependencies.<\/p>\n
\u201cSupply chain attacks are through the roof, and developer credentials are under significant threat,\u201d he said.<\/p>\n
\u201cIn the age of AI, you still need vulnerability scanning and mechanisms to investigate third-party libraries.\u201d<\/p>\n
At the same time, Bampton warned against over-reliance on AI tools, noting the risk of developers losing critical security skills through \u201ccognitive offloading\u201d. Education, he said, remained a core priority.<\/p>\n
Bampton said the university\u2019s application security strategy was also evolving in response to the commissioning of its MAVERIC AI supercomputer. He said Monash had deployed a small fleet of dedicated AI development machines in addition to the supercomputer to further support researchers with local, controlled access to advanced compute resources.<\/p>\n
\u201cAs an application security practitioner, a lot of my work is shifting towards AI and non-deterministic ways of working,\u201d Bampton said.<\/p>\n
\u201cI am optimistic about our ability to guide developers on how to use this technology responsibly.\u201d<\/p>\n
\u201cBut the fundamentals still hold. At the end of the day we want secure code, functional code, and robust solutions that scale.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Application security teams are facing a widening gap between vulnerability detection and remediation thanks to the rapidly growing…\n","protected":false},"author":2,"featured_media":800412,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[256,254,255,64,63,105],"class_list":["post-800411","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-au","tag-australia","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/800411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=800411"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/800411\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/800412"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=800411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=800411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=800411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"How](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/07\/1784060781_681_ImageResizer.ashx.jpeg\")
<\/p>\n