Vibe coding is expanding the attack surface faster than any security team can monitor it
Wired reports thousands of AI-assisted vibe-coded apps expose corporate databases, API keys, and customer records publicly via default Supabase settings, unauthenticated endpoints, and hardcoded credentials in tools built on Cursor, Bolt, and Lovable without security review. Creates enterprise liability and startup opportunity in AI-generated code security tooling.