Episode Details
Back to Episodes
#508: NOT Production-Ready: 2025 AI Coding Reality Check
Description
Big thanks to ThreatLocker for sponsoring my trip to Black Hat 2025. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal
AI can turn weeks of coding into seconds, but at what cost? Katie Paxton-Fear demonstrates how to use Gemini to generate a sprint plan and Cursor to build a Python port scanner from natural language. It works… and that’s the problem. We unpack how “vibe coding” blinds even pros to security, why these tools aren’t production-ready, and the guardrails you need for ethical hacking and internal tooling.
What you’ll learn
• How to turn ideas → sprint plan → working code (Gemini + Cursor)
• Why silent vulnerabilities make AI-built apps risky
• Ethical hacker use cases (agents, scanners) without shipping insecure code
• Policy tips: disclosure, internal use, avoiding shadow IT
Tools mentioned: Gemini, Cursor (AI IDE), Claude (briefly), v0
// Katie Paxton-Fear SOCIALS //
Website: https://insiderphd.dev/
LinkedIn: https://www.linkedin.com/in/katiepf/?...
YouTube: / insiderphd
X: https://x.com/InsiderPhD
// YouTube video REFERENCE //
• Vibe Coding in Cursor for Cyber Security
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
Key topics: vibe coding, AI coding, port scanning, secure-by-design
If you’re experimenting with AI coding, watch this before you deploy anything.
#blackhat #vibecoding #security