Joel De La Garza is joined by Dylan Ayrey, co-founder and CEO of Truffle Security, and Feross Aboukhadijeh, founder and CEO of Socket, to discuss one of the biggest shifts happening in cybersecurity: AI models are no longer just finding vulnerabilities—they&#x27;re exploiting them. As frontier models become increasingly capable of hacking, software security, supply chain attacks, and cyber defense are entering a fundamentally new era. The conversation explores AI-powered hacking, software supply chain attacks, leaked credentials, zero-day vulnerabilities, package manager security, and why the path of least resistance for increasingly autonomous AI systems may also be the most dangerous. They also discuss what enterprises, developers, and the open-source ecosystem need to do to adapt as the gap between vulnerability discovery and exploitation continues to shrink. Resources: Follow Dylan Ayrey on X: https://x.com/InsecureNature Follow Feross Aboukhadijeh on X: https://x.com/Feross Follow Joel De La Garza on LinkedIn: https://www.linkedin.com/in/3448827723723234/ Check out everything a16z is doing with artificial intelligence here, including articles, projects, and more podcasts. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

How AI Is Rewriting the Rules of Cybersecurity | Truffle Security & Socket

AI + a16z

[SPEAKER_03] Models are actively escaping their cages, going out on the internet and doing pretty nasty things.

[SPEAKER_01] Recently we found an API key that had been leaked on the internet that had administrative access to the Apache Foundation. The interesting thing about cybersecurity in particular is the reward function is incredibly well defined. Get access to the data. Did it get access to the data? Reward the thing.

[SPEAKER_02] For a long time people had talked about this concept of an NPM worm. This idea that if someone could backdoor a package, get developers to install that, and then you could use the access stolen from those developers as they install it to self-propagate the worm.

[SPEAKER_01] If the labs are making it fundamentally easier to break into supply chain, do you think the labs have a moral obligation to fund some of the problems that they're causing?

[SPEAKER_03] I think it's really strange that they're not letting blue teams get access to these tools, but...

[SPEAKER_00] AI models are no longer just identifying software vulnerabilities. They're beginning to exploit them. In this episode, Joel De La Garza sits down with Dylan Airy of Truffle Security. And Feras Aboukha DJ of Socket to unpack what recent AI security incidents reveal about the next generation of cyber threats. They discuss why frontier models are increasingly capable of exploiting software vulnerabilities, how software supply chains have become one of the weakest links in modern security,

[SPEAKER_00] and what organizations need to do to defend themselves in an AI-first world.

[SPEAKER_03] Thank you so much for joining us. We've got Feras and Dylan here from Truffle and Socket. It's great to have you guys on. This has been probably one of the most interesting weeks, if not the most interesting week in...

How AI Is Rewriting the Rules of Cybersecurity | Truffle Security & Socket

Read the full transcript

The candid version is on a podcast,
not the earnings call.

How AI Is Rewriting the Rules of Cybersecurity | Truffle Security & Socket

Read the full transcript

The candid version is on a podcast, not the earnings call.

The candid version is on a podcast,
not the earnings call.