Skip to content

AI Outlooks

News and viewpoints on the latest in AI security

Primary Menu
  • Home
  • What’s new in AI
    • AI Security News
    • Agentic AI News
    • AI Regulation News
    • AI Research News
    • AI Model News
  • Solutions
  • Cybersecurity
    • AI security
    • OWASP
    • Ransomware
    • Shadow AI
  • Learn
    • AI security
    • LLM security
    • AI governance
    • AI compliance
    • Agentic AI
    • AI infrastructure
    • AI data security
  • Home
  • LLMs
  • Vibe coding can be a cybercriminal’s playground
  • Cybersecurity
  • LLMs
  • Vibe coding

Vibe coding can be a cybercriminal’s playground

Vibe coding has eliminated the barrier to entry for cybercrime.
Staff August 25, 2025
code

The promise of vibe coding was intoxicating: describe what you want in plain English, and AI transforms your words into functional applications. Yet what began as Andrej Karpathy’s vision for frictionless development has morphed into something darker. Cybercriminals have discovered that the same tools letting anyone build apps without touching code also let anyone build scams without breaking a sweat.

The latest casualty? Lovable, the Stockholm-based AI platform that rocketed to a $1.8 billion valuation after promising to revolutionize software creation. Proofpoint researchers have detected tens of thousands of malicious Lovable URLs since February, with cybercriminals weaponizing the platform to deploy everything from credential phishing to cryptocurrency wallet drainers.

The barrier to entry for cybercrime has essentially vanished.

The democratization of digital deception

Think about the traditional cybercriminal’s workflow: master coding, study social engineering, maintain infrastructure, evade detection. Each step required specialized knowledge that naturally limited the pool of potential bad actors. Vibe coding obliterates these prerequisites. A single prompt can spawn a pixel-perfect Microsoft login page, complete with your company’s branding pulled from Azure Active Directory.

Guardio Labs tested this hypothesis and found Lovable scored 1.8 out of 10 on their VibeScamming Benchmark—essentially failing every security check. ChatGPT scored 8, demonstrating robust pushback against malicious requests. The difference? Lovable prioritized creation velocity over content verification. When researchers prompted it to build phishing infrastructure, it complied without hesitation, even suggesting ways to avoid detection.

The sophistication of these AI-generated attacks would impress seasoned security professionals. One campaign distributed Tycoon phishing kits through Lovable-hosted sites, implementing adversary-in-the-middle techniques to intercept multifactor authentication tokens in real-time. Victims solved innocent-looking CAPTCHAs before landing on counterfeit login pages indistinguishable from legitimate Microsoft portals. The stolen session cookies bypass MFA entirely, granting attackers persistent access even after password resets.

Beyond amateur hour: AI’s security blind spots

The security vulnerabilities emerging from vibe coding extend far beyond simple phishing. Databricks researchers discovered that AI-generated code regularly contains critical flaws like arbitrary code execution vulnerabilities and unsafe memory allocation. When they asked ChatGPT to create a multiplayer game, it defaulted to using Python’s pickle module for network serialization—a classic security antipattern that enables remote code execution.

Consider the implications: thousands of developers are shipping production code they’ve never read, trusting AI’s output implicitly. Intigriti researchers found AI models consistently hardcode database credentials directly in application files. They generate admin panels where authentication checks rely on easily manipulated localStorage values. SQL injection vulnerabilities that the industry eliminated decades ago resurface because LLMs train on millions of vulnerable code examples from GitHub’s dustier corners.

The irony cuts deep. We’ve spent years building secure development frameworks, enforcing code reviews, implementing static analysis tools. Vibe coding circumvents this entire security apparatus, delivering functional-but-flawed applications straight to production.

Fighting fire with firepower

Lovable’s response reveals both the challenge and opportunity ahead. After Proofpoint’s disclosure, they deployed Security Checker 2.0, an AI-powered system now blocking approximately 1,000 malicious projects daily. Their human review team removed 300 sites in two weeks. They achieved SOC 2 Type 2 compliance. Yet the fundamental tension remains: how do you maintain the “vibe” while preventing abuse?

The answer might lie in treating AI-generated code differently than human-written code. Snyk’s AI Trust Platform represents this paradigm shift, embedding security directly into AI development workflows rather than bolting it on afterward. Their research shows 48% of AI-generated code contains vulnerabilities—a sobering statistic demanding new approaches.

Security-conscious prompting emerges as a critical skill. Instead of “build me a login system,” developers must specify “build a secure login system preventing SQL injection, implementing proper password hashing, and enforcing rate limiting.” The difference between casual prompting and security-aware prompting can mean the difference between a breach and business continuity.

The vibe check we desperately need

Vibe coding’s trajectory mirrors every transformative technology: initial euphoria, reckless adoption, inevitable exploitation, then grudging maturation. We’re currently navigating stage three, where cybercriminals exploit the gap between capability and responsibility.

The solution isn’t abandoning AI-assisted development—that genie has escaped its bottle. Instead, we must evolve our security posture to match this new reality. Platforms need adversarial testing before launch. Developers need security training for prompt engineering. Organizations require policies governing AI-generated code deployment.

Most importantly, we need to acknowledge that “vibing” and vigilance aren’t mutually exclusive. The same AI accelerating development can enforce security standards, if we program it properly. The question isn’t whether we’ll continue vibe coding—we will. The question is whether we’ll learn to vibe responsibly before the next billion-dollar breach teaches us the hard way.

The future of software development lives somewhere between absolute freedom and absolute security. Finding that balance might be the most important engineering challenge of our generation.


FAQs

What is vibe coding, and how does it work?

Vibe coding allows users to describe what they want in plain language, and AI transforms those words into functional applications without requiring traditional coding knowledge or skills.

How are cybercriminals exploiting vibe coding platforms?

Cybercriminals use vibe coding to create malicious websites, phishing pages, and scams without technical expertise. Proofpoint detected tens of thousands of malicious Lovable URLs since February targeting credential theft and cryptocurrency.

What security vulnerabilities does AI-generated code typically contain?

AI-generated code regularly contains critical flaws including arbitrary code execution vulnerabilities, unsafe memory allocation, hardcoded database credentials, weak authentication checks, and SQL injection vulnerabilities that bypass modern security practices.

How did Lovable respond to cybercriminal abuse of their platform?

Lovable deployed Security Checker 2.0, an AI-powered system blocking approximately 1,000 malicious projects daily. Their human review team removed 300 sites in two weeks and achieved SOC 2 compliance.

What approaches can improve security in AI-assisted development?

Security requires adversarial testing before platform launches, security training for prompt engineering, organizational policies governing AI-generated code deployment, and security-conscious prompting that specifies protection requirements upfront.


Tags: Lovable Proofpoint

Continue Reading

Previous: AI’s energy paradox: How quantum computing could reduce power consumption
Next: AI’s trillion-dollar reality check

More in AI security

  • Guide

The agentic AI security checklist: 12 controls to verify before you deploy

Staff September 4, 2026
Twelve controls to verify before you deploy an AI agent, each mapped to an OWASP ASI risk...
Read more Read more about The agentic AI security checklist: 12 controls to verify before you deploy
LLM jailbreak defense: techniques that actually stop attacks Jailbreak defense
  • Cybersecurity

LLM jailbreak defense: techniques that actually stop attacks

Staff July 28, 2026
How do enterprises secure AI data pipelines at production scale? safety
  • Cybersecurity

How do enterprises secure AI data pipelines at production scale?

Staff July 28, 2026
How companies can defend against AI model extraction attacks
  • Guide

How companies can defend against AI model extraction attacks

Staff July 23, 2026
What is a model inversion attack?
  • Glossary

What is a model inversion attack?

Staff July 22, 2026

Glossary

model router
  • LLMs

What is a model router for AI? A plain-English guide

Staff July 30, 2026
A model router for AI is a decision layer that picks which large language model answers each...
Read more Read more about What is a model router for AI? A plain-English guide
What is agentic SDLC?
  • Glossary

What is agentic SDLC?

Staff July 22, 2026
What is a model inversion attack?
  • Glossary

What is a model inversion attack?

Staff July 22, 2026
LLM system prompt leakage: what it is, how it works, and how to stop it agentic ai
  • Glossary

LLM system prompt leakage: what it is, how it works, and how to stop it

Staff July 15, 2026
What is LLM supply chain security? (OWASP LLM03:2025 explained) llm supply chain
  • Glossary

What is LLM supply chain security? (OWASP LLM03:2025 explained)

Staff July 14, 2026

Guides

The agentic AI security checklist: 12 controls to verify before you deploy
  • Guide

The agentic AI security checklist: 12 controls to verify before you deploy

Staff September 4, 2026
LLM jailbreak defense: techniques that actually stop attacks Jailbreak defense
  • Cybersecurity

LLM jailbreak defense: techniques that actually stop attacks

Staff July 28, 2026
How do enterprises secure AI data pipelines at production scale? safety
  • Cybersecurity

How do enterprises secure AI data pipelines at production scale?

Staff July 28, 2026
How companies can defend against AI model extraction attacks
  • Guide

How companies can defend against AI model extraction attacks

Staff July 23, 2026
What is a model inversion attack?
  • Glossary

What is a model inversion attack?

Staff July 22, 2026
How to prevent adversarial attacks on AI models
  • Guide

How to prevent adversarial attacks on AI models

Staff July 22, 2026
  • Home
  • What’s new in AI
  • Solutions
  • Cybersecurity
  • Learn
Copyright © All rights reserved. | by AF themes.