Your developers are the attack surface now and vibe coding as a vulnerability | Tanya Janca
This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).
Tanya Janca, OWASP Top 10 Project Leader, explains why vibe coding has become a critical security risk and why developers themselves are now the primary attack surface. The newsletter also covers Meta's controversial restructuring (mandatory keystroke tracking, reassigning engineers to AI data labeling), Charity Majors' argument that AI-generated code demands more engineering discipline, the rise of domain-specific open-weight models like GLM-5.2, Microsoft potentially self-hosting DeepSeek for Copilot, and Anthropic's analysis of 400K Claude Code sessions showing humans drive 70%+ of planning while models handle 80%+ of execution.
Table of contents
1. The dismantling of Meta’s engineering culture2. Raising the bar for engineering discipline3. The rise of domain specific open weights4. Microsoft’s search for cheaper inference5. Life beyond tokenmaxxing6. The federal crackdown on Fable 57. The persistent return to expertise269 Impressions