Connect your Claude, Codex or OpenClaw for full transcripts on millions of podcasts. Two week free trial, cancel anytime.

Start free trial →
SG Steve Gibson Steve Gibson Software developer and security researcher who founded Gibson Research Corporation, maker of the SpinRite disk maintenance and recovery utility and the ShieldsU...

“I've always modeled security as an inherently porous medium, the idea being that the harder you push, the more vulnerable a system would be shown to be. But AI is revealing that even our most hardened software is softer than we knew.”

Security Now · Software Engineering & Infra · November 2026

“I've always modeled security as an inherently porous medium, the idea being that the harder you push, the more vulnerable a system would be shown to be. But AI is revealing that even our most hardened software is softer than we knew.” — Steve Gibson, Security Now

Context

Steve Gibson was going through an AI lab's cyber-model announcement that included dozens of new high-severity Firefox bugs confirmed by Mozilla, in code he calls among the most scrutinized in the world. He had expected AI to run out of flaws in well-reviewed software faster than it is.

Transcript

Security Now Around 57:26 into the episode
Steve Gibson

So it's a good question.

Leo Laporte

Maybe you better talk, start with talking about what that is.

Steve Gibson

Yeah, not as I understand it. So as I noted last week, I have, and I mentioned this last week, I've been very much enjoying Kevin Roos's New York Times best-selling book, The AGI Chronicles. It sounds like you were familiar with it, Leo. Oh, yeah, absolutely. Okay. So I'm still only 40% of the way through the book, but I've noticed that now, when I'm reading the news about the various people and personalities who are making AI news, I know so much more about them than, you know, just their name. I have a real sense for who they are, which is fun. And that's the reason I picked this book up is I wanted to understand the backstory. This all to us who weren't paying attention to what was going on for the last decade, it feels like this suddenly just AI just sprang. But there's a lot more that happened historically. One of the terms that I learned from the book is the phrase AI pilled. It's a derogatory term used within the AI community. It's sort of meant in the sense of the Matrix's Neo, right? Who was offered either…

Leo Laporte

One of the things maybe it's Marcus Hutchins was saying this on X that most hackers are not sophisticated enough to really be able to use these AI tools in the way that we worry about. That this is still not script kitty material level. Right. Right.

Steve Gibson

Yeah.

Leo Laporte

Right. And I think that that's encouraging. And they're not, and we've seen that. The attacks, we've seen a lot of flaws that we found and fixed, but the attacks are not swamping us by any means yet.

Speaker names come from our own diarization. The position is estimated from where the line sits in the episode.

More from Security Now