WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe • Jul 10, 2026 • Session details

GenAI Is a Junior Dev With Root Access

Julian Totzek-Hallhuber

Are you trusting a naive junior developer with root access to your codebase? Learn why 45% of AI-generated code introduces critical vulnerabilities that evade standard security scans.

Pause
Mute Enter Fullscreen
#1 about 4 min

Introduction to the generative AI code security report

An inaugural security report maps how differing language models consistently fail basic fundamentals when writing functional application code.

#2 about 2 min

Research methodology for evaluating AI code generation security

Testing four programming languages and over one hundred models reveals baseline performance capabilities against prominent software vulnerabilities.

#3 about 3 min

Analyzing security pass rates across languages and vulnerabilities

Java models exhibit surprisingly low security pass rates compared to other programming languages when natively generating logical code.

#4 about 1 min

The negligible impact of AI model size on security

Both large and tiny language models consistently achieve comparable security benchmark pass rates hovering around fifty percent.

#5 about 3 min

Evolution of security performance in newer generative AI models

Recent language model iterations demonstrate notable performance improvements by raising the overall code security pass rate to seventy percent.

#6 about 4 min

Building a real application using Cursor and vibe coding

An experiment building an application exclusively through conversational prompting exposes how AI assistants casually inject outdated backend dependencies.

#7 about 3 min

Discovering undetected business logic flaws in AI generated applications

Artificial intelligence tools frequently introduce severe logic errors like exposed administrative privileges that entirely bypass classical static testing tools.

#8 about 3 min

Exposing missing access controls through automated penetration testing

Automated penetration testing identifies hidden direct object reference exploits and complex access control failures concealed inside vibe coded components.

#9 about 3 min

Shifting security testing focus toward critical application logic problems

Engineering teams must adopt offensive penetration testing to capture the subtle operational flaws that baseline security scanners routinely miss.

#10 about 2 min

Comparing security pass rates between human programmers and AI

Historical industry metrics illustrate how human software developers statistically compare against artificial intelligence systems for producing consistently secure code.

#11 about 2 min

Using language models to self-detect and flag software vulnerabilities

Evaluating active software frameworks utilizing advanced language models requires painstakingly filtering through pervasive false positives to pinpoint reliable findings.

#12 about 2 min

Propagating vulnerability fixes across multiple development projects automatically

Emerging ecosystem tools intend to capture localized developer prompt corrections and systematically distribute those essential security patches across organizations.

Matching moments

3:36 min

Security vulnerabilities in rapid AI code generation

Chris Heilmann Chris Heilmann +2 · LIVE

4:08 min

Evaluating artificial intelligence for code generation and vulnerabilities

Jackie · Coffee With Developers

3:31 min

Evaluating the flaws and benefits of AI code generation

Sergio Freire Sergio Freire · Europe 2026 Virtual

2:59 min

Building a vulnerable application for security testing

Malte Lantin Malte Lantin +1 · World Congress 2026 Europe

1:06 min

Addressing security flaws in AI-generated code

Balázs Kiss · World Congress 2023

2:05 min

The impact and risks of AI generated code

Chris Heilmann Chris Heilmann · LIVE

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17
3 months ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41
3 months ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06
3 months ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13
3 months ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23
3 months ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26
3 months ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Related videos

The transformative impact of GenAI for software development and its implications for cybersecurity thumbnail
25:19
World Congress 2024 • about 2 years ago

The transformative impact of GenAI for software development and its implications for cybersecurity

Chris Wysopal

WeAreDevelopers LIVE - Is AI replacing developers?, Stopping bots, AI on device & more thumbnail
1:01:03
LIVE • over 1 year ago

WeAreDevelopers LIVE - Is AI replacing developers?, Stopping bots, AI on device & more

Chris Heilmann, Daniel Cranney, Sebastian Gingter

Panel discussion: Developing in an AI world - are we all demoted to reviewers? WeAreDevelopers WebDev & AI Day March2025 thumbnail
47:35
LIVE • over 1 year ago

Panel discussion: Developing in an AI world - are we all demoted to reviewers? WeAreDevelopers WebDev & AI Day March2025

Laurie Voss, Rey Bango, Hannah Foxwell, Rizel Scarlett, Thomas Steiner

GenAI Security: Navigating the Unseen Iceberg thumbnail
24:33
World Congress 2025 • 11 months ago

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing

Vibe coding sucks! Long life to vibe coding: Hardening Applications for Production with GenAI thumbnail
29:00
World Congress 2025 • about 1 year ago

Vibe coding sucks! Long life to vibe coding: Hardening Applications for Production with GenAI

Raúl Berganza Gómez

Let’s write an exploit using AI thumbnail
21:01
World Congress 2024 • about 2 years ago

Let’s write an exploit using AI

Julian Totzek-Hallhuber

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.