Noticias

An open combination padlock resting on a computer keyboard, photographed in close-up

Hardcoded secrets are the most common finding in vibe-coded repos

API keys, database passwords, and JWT signing secrets committed directly to source code are the single most frequent security issue in AI-assisted projects. This article explains why it happens and how to fix it systematically.

A dark server room filled with rows of illuminated servers

security5 min de lectura

SQL injection in AI-generated ORM code: what the model gets wrong

LLMs frequently produce query builders that concatenate user input directly into SQL strings, bypassing the parameterisation that ORMs exist to provide. This article walks through the most common patterns and how to spot them in a code review.