Matt Palmer's scan found 170 of 1,645 Lovable showcase apps leaking data through inadequate Row Level Security, the same kind of gap Wiz found at Moltbook. Before launch, an AI-built app needs a review that tests the database rules behind its public key.
Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap0
- Incentives35
- Confidence55
Commercial AI models refused every query from Hugging Face's breach responders, Veracode's Chris Wysopal wrote, forcing them onto a self-hosted Chinese model. Security leaders now have to settle which AI model their responders can use before an intrusion starts.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 45%
- Investor
- Investor 33%
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+30
- Incentives55
- Confidence50
An August 13 memorandum lets vetted US firms run surveillance and disruption operations against criminal networks. The controls are written around US persons, not bystanders.
Perspective Coverage
8 publishers
- Builder
- Builder 29%
- Operator
- Operator 52%
- Investor
- Investor 19%
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap+25
- Incentives55
- Confidence64
JFrog is deprecating Xray's Block Download between April and November 2026 and moving enforcement into Curation, a product licensed per seat. Teams who use Xray as their gate have eight months to fund a replacement.
Reality
- Evidence35
- Adoption45
- Hype gap+35
- Incentives85
- Confidence40
Agents show up in logs carrying the credentials of the employees whose authority they inherit. The security executives in a CSO Online account want their scope set by proxies, brokered tokens and downstream authorization before deployment.
Reality
- Evidence58
- Adoption32
- Hype gap+22
- Incentives76
- Confidence52
Two 2026 studies put AI-generated deployment infrastructure at worse than a coin flip, and the gates most CI pipelines run were built for application source, not config.
Reality
- Evidence58
- Adoption52
- Hype gap+12
- Incentives66
- Confidence57
Veracode ran more than 150 models over 80 tasks and found 45% of the output carries a known weakness. The level is bad; the flat two-year trend is the part that changes your plan.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+25
- Incentives78
- Confidence48
GitHub now sells Advanced Security as two SKUs, at $19 and $30 per active committer per month. Neither one routes a finding to an owner or enforces a deadline.
Reality
- Evidence28
- Adoption
- Insufficient
- Hype gap+34
- Incentives74
- Confidence33
A memorandum signed on August 12 lets vetted US firms run offensive cyber operations against foreign criminal networks. The unpriced term is who absorbs the downside.
Reality
- Evidence45
- Adoption15
- Hype gap+20
- Incentives55
- Confidence48