At the RSAC Conference, the NCSC CEO discussed the dual nature of 'vibe coding' (AI-generated software). While unreviewed AI code poses significant security risks, properly trained AI tools offer a transformative opportunity to create secure-by-design software and reduce collective vulnerability to cyber attacks.