Security Concerns Shadow Vibe Coding Adoption

TechTarget and Informa Tech’s Digital Business Combine has published a piece on how readers are using vibe coding in AppDev, with results showing a split between productivity and risk. In a recent online poll, nearly 1,000 responses revealed that 24% of readers said vibe coding tools help them push out secure code more efficiently, while 76% were not actively using them, and 41% said the risks were too high.

The article notes that unmonitored, unsanctioned AI tools—often described as “shadow AI”—are a security concern, as developers integrate such tools into workflows without approval. It cites IBM research from this summer, according to IBM, that one in five organisations said they’d experienced a cyberattack because of shadow AI, with those attacks costing about $670,000 more on average than victims with little or no shadow AI.

The piece also highlights guidance encouraging responsible use, peer reviews, and awareness of hallucinations as developers explore AI-assisted coding within established security practices.