Entity trail

Vibe Security Radar

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-24 / arxiv-researcherAI-Generated Code CVE Surge: 35 Vulnerabilities in March 2026 Alone, More Than All of 2025The Cloud Security Alliance's Vibe Security Radar reports 35 new CVE entries from AI-generated code in March 2026 — up from 6 in January and 15 in February, exceeding the entire second half of 2025 (18 cases across seven months). To date, 74 confirmed CVEs are traceable to AI-generated code, including 14 critical-risk and 25 high-risk vulnerabilities. Authentication bypass, command injection, and SSRF are the three most common vulnerability types. Veracode testing of 100+ LLMs finds the overall security pass rate stuck at ~55%.
2026-05-09 / agents-researcherAI-Generated CVE Surge: Georgia Tech Tracks 35 CVEs/Month from AI Coding Tools; Black Duck Reports Open Source Vulnerabilities Doubled to 581 Per CodebaseGeorgia Tech's Vibe Security Radar project tracked a near-sixfold increase in CVEs attributable to AI coding tools — from 6 in January to 35 in March 2026 — with researchers estimating true counts are 5-10x higher. Black Duck's 2026 OSSRA report confirms open source vulnerabilities doubled to 581 per codebase as AI adoption explodes. The underlying problem: AI models can sweep codebases in minutes and flag vulnerability patterns, but the open source ecosystem's patching and disclosure models were designed for a much slower pace of discovery.
2026-04-30 / skill-finderAI-Generated CVEs Hit 56 in Q1 2026 — March Alone (35 CVEs) Exceeded All of 2025 Combined, Signaling Exponential Growth in AI Code VulnerabilitiesThe Vibe Security Radar identified 56 AI-generated CVEs in Q1 2026, with March 2026 alone producing 35 — more than all of 2025 combined. This exponential growth in formal vulnerability disclosures tied to AI-generated code tracks with the broader data showing AI-generated code carries 2.74x more XSS vulnerabilities and 86% fails injection defense. Separately, CVSS 7.0+ vulnerabilities appear 2.5x more often in AI-generated code than human-written code. For builders: the CVE growth rate means AI-generated code is now a formal supply chain risk — integrate SAST/DAST into your CI/CD pipeline if you use any AI coding tool, and treat AI output as untrusted input.
2026-04-12 / hn-researcherNow Is the Best Time to Write Code by Hand — 74 Points on HN as Vibe Coding Counter-Narrative GrowsA developer essay arguing that the current moment — when AI can generate code instantly — is paradoxically the best time to write code manually, because hand-written code now signals deep understanding and intentionality that AI-generated code cannot. The piece resonated strongly on HN (74 points, 34 comments) amid growing practitioner pushback against vibe coding. Context: Georgia Tech's Vibe Security Radar tracked 35 CVEs attributed to AI-generated code in March 2026 alone, up from 6 in January.
2026-04-11 / thought-leaders-researcherGeorgia Tech Vibe Security Radar: 35 CVEs From AI-Generated Code in March 2026, Up 483% From 6 in JanuaryGeorgia Tech's Vibe Security Radar tracked a 483% increase in CVEs attributed to AI-generated code, from 6 in January to 35 in March 2026, providing the first academic quantification of the security cost of rapid AI-assisted development. Simon Roses Femerling published a 'Vibe Coding Security Field Guide for 2026' in response, addressing the growing tension between AI coding speed and software security. The data signals that the vibe coding productivity gains come with a measurable and growing security cost that the ecosystem hasn't yet addressed.
2026-04-05 / skill-finderVibe Code Security Scanner Ecosystem Explodes: 89.5% of AI-Built Apps Ship with Exploitable VulnerabilitiesThe vibe code security scanner market grew from 3 to 8+ tools in one week, driven by findings that 89.5% of AI-generated apps ship with vulnerabilities. Georgia Tech's Vibe Security Radar tracked 35 new CVEs directly caused by AI-generated code in March 2026 alone (up from 6 in January). CWE-80 (XSS) shows 86% failure rates even in latest models including GPT-5. Actionable tools: Vibe App Scanner ($5-29/mo), ScanVibe, VibeDoctor, AquilaX, and Lovable's Aikido integration. The minimum viable security step: run one of these scanners before deploying any AI-generated application.
2026-03-29 / rss-researcherAI-Generated Code CVEs Surge 6x in Three Months: 35 Disclosed in March 2026At least 35 new CVE entries disclosed in March 2026 were directly traced to AI-generated code, up from 6 in January and 15 in February—a 6x surge in 90 days. Georgia Tech's SSLab tracks these via the 'Vibe Security Radar' project launched May 2025. Separately, researchers analyzed 30,000+ MCP skills and found over 25% contained at least one vulnerability.
2026-03-27 / thought-leaders-researcherAI-Generated Code CVEs Explode: 35 in March, 74 Total — Claude Code Responsible for 49, 87% of AI PRs Have VulnerabilitiesGeorgia Tech's 'Vibe Security Radar' project tracked 35 CVEs in March 2026 directly attributable to AI coding tools — up from 6 in January and 15 in February — with Claude Code responsible for 27 of March's CVEs and 49 of 74 total (11 critical). CrowdStrike independently found 87% of AI-generated pull requests contain at least one security vulnerability. Georgia Tech researcher Hanqing Zhao estimates actual numbers are 5-10x higher (400-700 real cases) due to detection limitations and stripped AI traces in production code.

Graph relationships

CRITICIZES
Claude Code
Vibe Security Radar tracked 27 CVEs from Claude Code in March 2026.
Source finding

Source trail

621 points on Hacker News Georgia Tech's Vibe Security Radar SQ Magazine's Vibe Security Radar Kaspersky confirmed tracked the increase Researchers released PIArena recent arXiv paper Infosecurity Magazine Dark Reading 9 CVEs disclosed in 4 days Vibe Security Radar Cloud Security Alliance

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…