developer-security
4 posts on this topic. For the full archive, see the security blog. Comparison writes-ups live on Why Puaro and the methodology page.
Innovation or Negligence? The Dark Side of the "Vibe Coding" Wave
Security researchers at RedAccess scanned hundreds of thousands of apps built on vibe coding platforms like Lovable, Replit, and Base44. What they found should worry anyone shipping software without a security review.
How AI-Powered Scanning Prevents the Next 'GlassWorm' Supply Chain Attack
The recent GlassWorm incident exposed critical vulnerabilities in the software supply chain when developers accidentally leaked VS Code extension tokens. Learn how AI-powered scanning provides proactive prevention beyond simple pattern matching.
Secret Scanning Is Becoming a $12 Billion Market by 2033
The source code secret scanning market is projected to reach up to $12 billion by 2033, and AI-powered detection tools are already hitting 97% accuracy in identifying real threats.
How Human Error Leads to Leaked Secrets and Data Breaches
Git commits, hardcoded API keys, and debug logs are common ways developers accidentally expose secrets and sensitive data. This post covers real incidents caused by these mistakes and practical ways to prevent them.