Security, release readiness, and shipping AI-built apps with confidence. Field notes from the team building VibeZero.https://vibezero.io/blog/https://vibezero.io/blog/the-fix-your-ai-swears-it-shipped/https://vibezero.io/blog/the-fix-your-ai-swears-it-shipped/Prompting the AI to fix its own security bugs feels like closure. Why unverified fixes fail, how they quietly regress, and what a real fix loop looks like.Fri, 24 Jul 2026 00:00:00 GMThttps://vibezero.io/blog/tea-app-firebase-breach/https://vibezero.io/blog/tea-app-firebase-breach/The Tea app breach exposed 72,000 user photos, including 13,000 selfies and government IDs, in a cloud storage bucket with no authentication.Wed, 22 Jul 2026 00:00:00 GMThttps://vibezero.io/blog/moltbook-breach-same-bug-again/https://vibezero.io/blog/moltbook-breach-same-bug-again/The Moltbook breach exposed 1.5 million API keys: a vibe-coded app shipped a Supabase backend with row-level security off. Why it keeps happening.Tue, 21 Jul 2026 00:00:00 GMThttps://vibezero.io/blog/introducing-the-vibezero-blog/https://vibezero.io/blog/introducing-the-vibezero-blog/Why we are writing about security, release readiness, and shipping AI-built apps without the guesswork.Mon, 20 Jul 2026 00:00:00 GMThttps://vibezero.io/blog/most-common-vibe-coded-app-vulnerabilities/https://vibezero.io/blog/most-common-vibe-coded-app-vulnerabilities/What actually goes wrong when apps are built by prompting an AI: the five vulnerability classes that show up again and again, with the research behind each one.Mon, 20 Jul 2026 00:00:00 GMThttps://vibezero.io/blog/five-layers-of-a-release-gate/https://vibezero.io/blog/five-layers-of-a-release-gate/A single scan should look at code, dependencies, secrets, configuration, and the running app. Here is why each layer matters.Sat, 18 Jul 2026 00:00:00 GMT