Home / Technology / AI Code Tools Unleash Data Tsunami
AI Code Tools Unleash Data Tsunami
7 May
Summary
- Over 5,000 AI-coded web apps found with virtually no security.
- Nearly 40 percent of vulnerable apps exposed sensitive medical and financial data.
- Phishing sites impersonating major corporations were created with AI tools.

Security researchers have identified a significant vulnerability in AI-powered coding tools, with over 5,000 web applications found to have minimal to no security measures.
These applications, developed using tools like Lovable, Replit, Base44, and Netlify, often left sensitive corporate and personal data accessible to anyone with the correct web URL. Around 40 percent of these vulnerable apps exposed confidential information such as medical records, financial data, and internal company strategy documents.
The findings also revealed that the AI coding tools were used to create numerous phishing sites that mimicked well-known corporations. This widespread lack of security raises serious concerns for organizations and individuals alike.
While some AI companies acknowledged that users may have published public apps that should have remained private, they stated that privacy settings can be adjusted. However, the ease with which vulnerabilities were discovered and exploited highlights a critical new challenge in software security.