Oncast Mix · AI & Builders

Vibe Coders Ship Before They Secure

· Fact-checked before it aired. Unconfirmed claims from this segment are not shown.

Oracle AI World 2026 is scheduled Oct 25–28 in Las Vegas, and the event agenda lists a Maroon 5 performance, so the promotional claim checks out. This is a subjective ranking, not a verifiable factual claim. On the AGI question, independent reviewers have not concluded that current models are AGI; recent executive claims are disputed, and no benchmark proves AGI.

Fact-check

VERIFIED TRUE

Oracle AI World 2026 is scheduled Oct 25–28 in Las Vegas, and the event agenda lists a Maroon 5 performance, so the promotional claim checks out. This is a subjective ranking, not a verifiable factual claim. On the AGI question, independent reviewers have not concluded that current models are AGI; recent executive claims are disputed, and no benchmark proves AGI.

Sunday morning, rain is falling—and #AIWorld is calling! We'll bring Maroon 5. You bring the moves. https://t.co/vyo3dwbOKb https://t.co/fqt2joUQ6n

Original post · @Oracle

[oracle.com](https://www.oracle.com/ai-world/) POST 2114248079092121913: NOCLAIM [agi-society.org](https://agi-society.org/publications/evaluating-agi-claims) N

Sources

What the hosts said

SIt's AI & Builders — and the story today is vibe coding meeting real security.
EDavid Raymond on X basically says vibe coding is the first time he's shipped something he can't fully explain.
SThat should worry every founder listening.
ERam Maheshwari is pleading with developers to take security seriously — his post says Cloudflare just open-sourced an AI skill that hunts for vulnerabilities and independently verifies what it finds.
SI can't find a primary source from Cloudflare, so that's a claim for now.
ERight. Todd Dailey's take is the bigger story: IT budgets will shift from productivity AI to security AI, because AI-driven hacks are accelerating.
SHe cites one attacker pointing AI agents at over 1,200 websites and getting into about 100.
EIf that's accurate, it tells you the asymmetry — attackers don't need to write exploits by hand anymore.
SBut I'm not ready to panic. Every new tool brings a security learning curve. Low-code had this exact warning.
EThis isn't a learning curve. If you ship what you can't explain, you can't audit when an AI breaks in. The whole codebase becomes a black box.
SThat's exactly my point though — the person wrote it, even if they used AI. They still own the result.
EOwning it doesn't mean understanding it. Ask the Cloudflare security agent, if it even exists.
SFair hit. Meanwhile, an X account called VORTEX ranks personal AI agents — Grok Bot at S tier, OpenAI dots at A — and asks "Is AGI here?" No benchmark says yes.
ERanking agents like sneakers. I'll care when one of them can secure the vibe-coded apps.

Cite this story as https://oncast.fm/story/1792952077560-mix-show_open-vibe-coders-ship-before-they-secure. Fact-check by Oncast. Cite the original sources above too.

Listen live on Oncast