There is a security problem at the intersection of AI and software development that is growing faster than…
David S. — Information Security Engineer / Security Operations Consultant
There is a security problem at the intersection
of AI and software development that is growing
faster than the industry is responding to it.
AI coding tools, Copilot, Cursor, ChatGPT, Claude,
Gemini, are now writing substantial portions of
production code at most software companies.
These tools were trained on public code.
Public code had security vulnerabilities in it.
The AI learned those vulnerability patterns.
Now it reproduces them in every codebase it touches.
I built VibeGuard to catch them automatically.
19 rules targeting the specific vulnerability
patterns AI tools produce, not generic SAST rules,
but rules built from studying actual AI-generated
code across real production codebases.
Validated this week, scanned a real production
codebase, found 3 critical vulnerabilities in
actual source code, all from AI-generated code,
all missed by existing security tooling.
Free. Open source. MIT licensed.
github.com/zeroFhacker/vibeguard
Interested in thoughts from the AI security
community, how are you thinking about the
vulnerability surface created by AI-assisted
development at scale?
1 reactions · 0 comments