AWS Security Live from Black Hat 2026 with Johnny Wong from Veracode

In this episode, hosts Ryan and Brian are joined by Johnny Wong, VP of Solutions Architecture at Veracode, to explore how AI-assisted “vibe coding” is changing the way software gets built—and the new security risks that come with it. While large language models are making developers faster and more productive, studies shared in the discussion show that a significant portion of AI-generated code still contains security vulnerabilities, raising concerns about scale and speed in modern development pipelines.

The panel breaks down where vulnerabilities commonly come from, including long-standing issues like SQL injection and cross-site scripting, and why languages like Java continue to appear in security findings. They also discuss how organizations are balancing traditional security scanning tools with newer AI-powered approaches, and why education and “shift-left” practices remain critical in building secure software.

Beyond the technical deep dive, the episode keeps things light with Black Hat energy—covering everything from the infamous “swear jar,” to unexpected analogies involving Taco Bell, to the universal truth that it’s very hot in Vegas.

Topics include:
AI-generated code and emerging security risks
Vibe coding and developer productivity
Application security and risk management at scale
OWASP Top 10 vulnerabilities
AI vs traditional security scanning approaches
Building trust in AI-assisted software development
A fast-moving, insightful conversation on where AI, security, and software development are heading next.

Visit veracode.com to learn more.