Incident response

Survey: 93% of large North-American IT shops have hit an AI-coding incident

Survey: 93% of large North-American IT shops have hit an AI-coding incident

The number

A survey published today on DevOps.com reports that 93% of 406 IT decision makers at North American organizations with more than 250 employees have experienced at least one infrastructure incident caused by reliance on AI coding tools. The sample is North American only, and the size cut is 250-plus employees. Startups and mid-market shops sit outside the frame. Read at face value, the AI-coding incident is now a baseline event at large IT.

That changes the conversation CI/CD owners have been carrying on their own. Until now the case for harder review on agent-generated changes was thin: anecdote against vendor demo. 93 out of 100 large IT shops is a number that fits on a slide in front of a steering committee.

What it doesn't tell you

The respondents are IT decision makers, not the on-call engineers paged at 3am, so the operational shape of these incidents (rollback time, blast radius, whether the offending change came from an autonomous agent or an autocompleted line) sits outside the headline. "Caused by reliance on AI coding tools" is also a wide net. A merge of a hallucinated import is one thing. A refactor pushed through a stale test suite is another. They call for different controls.

So the practical read is narrower than the headline. The 93% says the argument has shifted from whether AI-assisted code can break production at large IT shops, per DevOps.com, to which gate stops it and how much of the existing CI suite is enough. That second half is what teams will be answering with their own incident postmortems in the meantime.

Source: DevOps.com (devops.com)

Related
Platform engineering

Flipkart's chaos platform runs 90% of fault injection in staging, ships five fixes back to LitmusChaos

Flipkart's central reliability engineering team won the CNCF End User Case Study contest for a multi-tenant chaos engineering platform on Kubernetes that runs roughly 90% of its experiments in staging clusters and contributed five fixes upstream to LitmusChaos. The next step on the roadmap is to wire chaos testing into the CI/CD pipeline as a mandatory phase.

June 18, 2026
Security & supply chain

Tenet's 'Agentjacking' research turns Sentry error data into a prompt-injection vector for AI coding agents

Security firm Tenet has demonstrated an indirect prompt-injection technique it calls Agentjacking, malicious instructions hidden inside Sentry error data that get executed by an AI coding agent with shell access. The operational read is that any third-party telemetry an agent ingests is now untrusted input.

June 16, 2026
Runners & infrastructure

GitHub Actions resumes self-hosted runner version enforcement

Self-hosted runners must register on 2.329.0 or later and install each new release within 30 days, with full enforcement landing September 25, 2026 on github.com. The change moves runner version management from a hygiene task into a fleet-inventory problem.

June 15, 2026

Turn this into your pipeline. Build it on Buddy.

Start free