PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

An introduction to vibe coding

bugcrowd.com | blog | #ai-security | #vibe-coding | #karpathy | #intuition | #developer-tools
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Vibe coding—prompting AI to write code—mirrors hacker intuition. Traced to Karpathy's 2025 coinage, it shows how pattern recognition and iteration drive both AI coding and security discovery.
Published
Collected

Related coverage

blog · aikido.dev
Everybody's shipping code they can't read
AI agents let anyone ship code they never read, including dependencies they never chose—a risk underscored by the Mastra attack, where 141 republished npm packages delivered wallet-stealing malware.
blog · bugcrowd.com
How vulnerable are vibe-coded apps?
The author built the same app with two LLMs and reviewed the results: vibe coding ships fast, but finite context windows and skipped security reviews can turn velocity into real vulnerabilities.
blog · bugcrowd.com
Your code has vibes, my exploits have receipts
Hacker Oxmoose argues AI-assisted coding produces code with vibes but little validation—hardcoded keys and unreviewed auth become low-hanging fruit for bug hunters.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · about.gitlab.com
What happens when vulnerabilities are discovered faster than you can fix them?
AI is changing how quickly vulnerabilities can be discovered and exploited. The next challenge is bringing that same speed to remediation and prevention
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
Back