Vibe Coding Security: Risks and How to Ship Safely
A product manager describes a refunds dashboard to an AI assistant on Friday and has it running by Sunday. It works, the team loves it, and it sits on a public preview link with no sign-in and a live payments key in its source.
Nobody removed a security control from that app. No control was ever there, because nobody reviewed the result as company software.