SecTor 2026 | Using Claude or Codex? We Can Hack Your App?
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
Today, most code is actually vibe-coded by the same top AI code models, which often reuse the same implementation patterns, including vulnerability patterns. We found that an attacker can generate and inspect their own applications, discover vulnerabilities that developers may have missed, and use those findings to attack other applications generated by the same model, which have a high chance of containing the same vulnerabilities. In this Briefing, we evaluate how high these chances are among today's top code models and present a new attack and threat model.
Description from Black Hat.
Explained
The technology and terms in this story. Learn more