Warning to enterprises: Vibe coding can be a threat

Vibe coding is a top security threat to enterprises and could leak data into the public sphere, analysts and executives are saying. “The number one risk at the minute is hard-coded secrets being uploaded through vibe-coded applications to GitHub, and then providing a route in,” said Pete Shoard, chief of research for cybersecurity at Gartner. The term “vibe coding” was coined by Andrej Karpathy as a way to describe how developers can now create applications by chatting with generative AI (genAI) tools and services. AI can quickly generate code to create a program, a dramatic change from the typical manual development process. Not surprisingly, vibe coding became the latest rage in the developer community almost immediately. Enterprises have been rushing to upskill employees to take advantage of the technology by encouraging non-tech employees to vibe-code applications. Companies have seen the benefits, including faster application development and quick creation of prototypes or mockups of final products. “Vibe coding makes writing apps more accessible to teams that don’t have developer or security experience, which expands the enterprise attack surface,” said Erik Nost, senior sec…