Speaker: Rein Daelman

Vibe coding is here.

Developers are shipping production applications built in hours with tools like Copilot, Claude, Cursor, and autonomous coding agents. The vibes are great….  until the vulnerabilities show up in production.

AI-written software introduces an entirely new failure mode: code that works perfectly, looks legitimate… and quietly ships insecure patterns, hallucinated packages, exposed secrets, and unreviewed attack paths.

In this talk, we'll break down what "vibe coded applications" mean for security teams, why traditional AppSec pipelines aren't ready, and how attackers are already exploiting this shift, from dependency hallucinations to prompt injection in AI-powered CI/CD workflows.

Drawing from real-world research ...