Cycode - Shift to AI Podcast - Episode 2 - Shift Left Is Dead. Shift to AI.

Securing AI-Generated Code & the Software Supply Chain | Bret Arsenault (Microsoft CISO Emeritus) - Shift to AI Description: Securing AI-generated code is the new frontline of application security (AppSec). In this episode of Shift to AI, Roland Cloutier talks with Microsoft's Bret Arsenault about protecting the software supply chain when the developer is sometimes an AI agent. The decade-long promise of "shift left" never fully delivered—developers didn't become security engineers. Now the perimeter has moved again: it's no longer the app or the endpoint, but the software factory itself—prompts, pipelines, MCP servers, and non-human identities (NHIs). Roland Cloutier (former Global CSO at TikTok, ADP, and EMC/Dell) sits down with Bret Arsenault, CVP, CISO Emeritus and Global Chief Security Advisor at Microsoft, to answer the question every security leader is now facing. In this episode: What does AppSec mean when AI agents write, review, and commit code? Why "shift left" fell short—and what replaces it in the agentic era How the security perimeter is moving to the software development lifecycle (SDLC) itself Securing prompts, pipelines, MCP servers, and non-human identities What it takes to secure a software factory that never sleeps Chapters: 00:00 Intro About the guest: Bret Arsenault is CVP, CISO Emeritus and Global Chief Security Advisor at Microsoft, one of the longest-tenured security leaders in the industry. About the show: Shift to AI features unfiltered conversations with the world's leading CISOs on agentic security, AI risk, and the future of cybersecurity. 🎧 Listen on all platforms: https://cycode.com/shift-to-ai-podcast/ 🔔 Subscribe for new episodes with top CISOs. #AppSec #SoftwareSupplyChain #AIsecurity #AgenticAI #CISO #Cybersecurity #DevSecOps #Microsoft #AIgeneratedcode #ShiftToAI