Real incidents in AI-built and startup apps, what went wrong, and what it would have taken to prevent it.
3 articles in Breaches tagged #vibe-coding
Clear filtersA founder proudly posted that his paying SaaS was built entirely by AI. Forty-eight hours later he was posting again: maxed-out API keys, people skipping the paywall, junk in the database. A week later the app was gone.
An AI-agent social network went viral, and within days researchers could read and edit its entire database with a key sitting in the page source. Here's the plain-English version, and how to check your own app.
About one in ten apps showcased on Lovable let strangers read, and sometimes change, their database. The cause was the same in almost every case, and it's one you can check for yourself this afternoon.
The free pre-launch checklist has the twenty checks we would run first, in the order we would run them. No email, no account.