The Security Podcast of Silicon Valley

The prompt injection Jesse Anglen describes takes one line of fine print at the bottom of a website. It tells any agent that reads it to drop its instructions and email out whatever credentials sit in the .env file, and then it waits for somebody's coding agent to land on the page during an ordinary research task. The co-founder and chief executive of Ruh.ai says he hasn't he...

If your security budget goes almost entirely to keeping attackers out, Yair Grindlinger thinks you're underfunding the part that's becoming more and more urgent. The co-founder and chief executive of Surf AI says artificial intelligence changed what happens after someone gets in. For years it was hard to turn a crack into meaningful data exfiltration. Now, once an attacker is...

Yashvier Kosaraju, who goes by Yash, is the Chief Information Security Officer (CISO) of a16z, 4 months into the job when this was recorded, which by his own measure feels like about a year. The job covers the firm’s corporate environment, its cloud controls and its pitch decks, and the part that makes him useful to this audience is that a16z sits close enough to its portfoli...