Connect your Claude, Codex or OpenClaw for full transcripts on millions of podcasts. Two week free trial, cancel anytime.

Start free trial →
AS Alex Stamos On Decoder with Nilay Patel

“Now with AI, what's happening is this kill chain has inverted, where you can run an AI system that just goes hogwild and it looks at the targets and it finds the bugs in real time and it writes the exploits in real time and it breaks into these companies. … It has been a long time since you've been able to go and just download an open source tool and break into multi-billion dollar companies. It's like the 90s, right?”

Decoder with Nilay Patel · Tech Strategy & Big Tech · November 2026

“Now with AI, what's happening is this kill chain has inverted, where you can run an AI system that just goes hogwild and it looks at the targets and it finds the bugs in real time and it writes the exploits in real time and it breaks into these companies. … It has been a long time since you've been able to go and just download an open source tool and break into multi-billion dollar companies. It's like the 90s, right?” — Alex Stamos, Decoder with Nilay Patel

Context

Asked who is behind the current wave of breaches, Stamos points to a jump in attacker capability from open-weight models and an open-source attack tool spreading fast. His point is that serious intrusions no longer need elite skill.

Transcript

Decoder with Nilay Patel Around 06:07 into the episode
Alex Stamos

…stole from the military, right? In the military, they mean to actually kill something. They're the steps you do to blow something up. In cyber, the kill chain is the things you do to have an effect on a target. So to steal information, to turn something off, right? To steal money, to steal Bitcoin.

Nilay Patel

Yeah.

Alex Stamos

…This started with three South Korean banks. This week, about 200 more companies have been hit. I've been helping a couple of companies. Cognition has been kind of, you know, we're not an incident response company, but we do go in and like help people fix their bugs afterwards by using our tools. It is shocking the companies that are getting hit by something you could just download. It has been a long time since you've been able to go and just download an open source tool and break into multi-billion dollar companies. It's like the 90s, right? That's

Nilay Patel

like Windows in the late 90s, early 2000s when it was a security disaster.

Alex Stamos

I started saying this actually in the beginning of this year, which is like, it's an incredibly exciting and terrifying time because the last time it felt like this was when I was a much younger man and I would go to the very early DEF CON's. DEF CON these days is like 40, 50, 60,000 people. Back…

Nilay Patel

You mentioned the economics of frontier models, just the economy of cyber is one of those things that has gotten sophisticated over the years. Right. So you're in these early days, a bunch of people in a room. One of the things that our systems got safer is you could pay the number of people at DEF…

Speaker names come from our own diarization. The position is estimated from where the line sits in the episode.

More from Decoder with Nilay Patel