Vibe Coded Security – Is that really Security?!!

If you are building AI into your enterprise stack, this story from TechCrunch this week deserves your full attention.

LiteLLM — a wildly popular open source tool downloaded up to 3.4 million times per day — was hit with credential-stealing malware that slipped in through a software dependency.

Discovered and disclosed by research scientist Callum McMahon of FutureSearch, the malware harvested login credentials across every system it touched before a bug in the code caused it to blow itself up. Ironically, researchers including Andrej Karpathy concluded it was likely “vibe coded”, meaning it was AI-generated itself!

But the second layer of this story is arguably worse.

LiteLLM had SOC2 and ISO 27001 certifications displayed on their website, which was issued through Delve, a Y Combinator compliance startup that has been accused of generating fake audit data and using rubber-stamp auditors. Delve, of course, denies the allegations.

Here is the takeaway for anyone deploying AI agents inside a Dynamics 365 or NetSuite environment:
The AI layer is only as trustworthy as the compliance and security infrastructure underneath it.

Certifications matter. Auditors matter. The dependencies your vendors rely on matter.

Vibe coded security is not security.

Full credit to Julie Bort at TechCrunch for the reporting on both the LiteLLM incident and the Delve connection.
hashtagEnterpriseAI hashtagERP hashtagDynamics365 hashtagNetSuite hashtagAIAgents hashtagCybersecurity hashtagDynamicsFocus

text

We track every new Microsoft Dynamics 365 and NetSuite job posting across North America, every single day, and October gave us the clearest read yet on where this market is actually heading. The short version is that ERP hiring cooled about 11% from September. That headline is true, and it is also misleading. Almost the entire drop sits in the Dynamics implementation tracks, while NetSuite held flat and demand for senior, in-house talent stayed strong. Whether this market feels soft or busy right now depends entirely on which role you are trying to fill. I pulled the full track by track breakdown into this month’s DynamicsFocus Recruiting Report, and it is attached below. If you have a role that has been sitting open since the summer, I would genuinely love to hear what you have tried so far and am more than happy to schedule a 30 minute Teams call to share potential strategies to rectify the situation, no strings attached. #MicrosoftDynamics #D365 #Dynamics365 #NetSuite #ERP #NetSuiteRecruiting #MicrosoftDynamicsRecruiting #TalentMarket #Hiring #AIAgents

Read More »