Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-26 · source-backed
Wiz disclosed that Moltbook, a social network for AI agents, exposed 1.5M API authentication tokens, 35,000 email addresses, and private agent messages through a misconfigured Supabase database. The vulnerability: a Supabase API key exposed in client-side JavaScript granting full read/write access to the entire production database. Founder Matt Schlicht publicly confirmed he "didn't write one line of code." The UK's professional accounting body ICAEW published an analysis citing Moltbook as evidence that vibe coding security risks are now a mainstream professional governance concern.
Each link below shares sources, entities, or timing with this story.
The man who coined "vibe coding" a year ago now declares it passe and introduces "agentic engineering" — the discipline of orchestrating AI agents that plan, write, test, and ship code under structured human oversight. The timing isn't accidental. Escape.tech released the larg...
Security researcher @weezerOSINT demonstrated that any free Lovable account could access other users' source code, database credentials, AI chat histories, and customer data via a Broken Object Level Authorization (BOLA) flaw. Every project created before November 2025 was exp...
Armature ran 16,893 coding sessions, 5,292 of which were valid, across 75 repositories, 10 languages, 1,163 prompt variations and 4 user personas, rotating E2B, Blaxel and Daytona sandboxes to kill provider bias. Nobody has published a controlled study at this scale before. Ar...
A 153-upvote post argues the Replit and Lovable wave produced people who confuse generating code with engineering software, drawing the line at supervision (r/SaaS). A developer using Claude to implement an architecture they understand is fast. Someone prompting a product they...
A June survey finds platforms collapsing point solutions into themselves: Stripe is now a tax engine and identity provider, Vercel ships an AI gateway, Cloudflare runs inference, Supabase competes with Pinecone on vector search, Notion is wiki plus database plus internal-tool...
I've been saying for months that the missing piece in agentic coding isn't smarter models. It's that agents can't provision anything. They can write code all day but the moment they need a database, an auth provider, or a hosting account, a human has to step in, click through...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.