Skip to content

AI Attacks Will Outpace Defense for Next 12 Months | Thai Duong

November 9, 2026 · 25 min

Show notes

Calif founder and offensive security researcher Thai Duong discusses how frontier AI models are shrinking exploit development timelines from months to weeks, why AI labs and neo clouds represent the most vulnerable infrastructure, and the breakdown of traditional cyber defense against concurrent agent swarms.

--

https://x.com/XorNinja

--

MTS is a live news and interview show covering technology, business, politics, and culture as it happens.

Follow MTS:

X | ⁠https://twitter.com/MTSlive⁠

YouTube | ⁠https://www.youtube.com/@mtsituation⁠

Spotify | ⁠https://open.spotify.com/show/4HUNNmV1pjV7CW6Lphm1rM⁠

Apple | ⁠https://podcasts.apple.com/us/podcast/mts/id1891088763⁠

Substack | ⁠https://mtslive.substack.com/⁠

Interested in sponsoring the show? ⁠⁠⁠⁠⁠⁠[email protected]⁠⁠

–

Brought to you by:

Mongo DB - Anyone can prototype an agent. Learn how to get them into production on September 30th in New York - register at https://www.mongodb.com/events/mongodb-local/nyc

Lovable - Turn ideas into software people love with Lovable. Start today at https://lovable.dev/

Larridin - Finally prove what your AI investment is worth. Head to https://larridin.com/ today to start measuring your AI’s bottom line.

Neon (by Databricks) - Get up to $100K in credits for your startup at ⁠https://neon.com/mts⁠

ElevenLabs - AI that communicates at human level across every channel and modality. https://elevenlabs.io/mts

Arena - Measuring AI performance in the real world. ⁠https://arena.ai/⁠

Kong - The AI connectivity platform. Connect APIs, LLMs, agents, and systems with serious security and governance. https://konghq.com

Today’s stream is sponsored by VCX, the public ticker for private tech. Head over to http://getvcx.com to learn more

Blitzy - Autonomous software development for enterprise codebases. Ship 5x faster. https://blitzy.com

AdQuick - Make your brand a billboard. Out-of-home advertising as easy to scale as digital. https://adquick.com

Chargebee - Billing and monetization infrastructure for the AI era. https://www.chargebee.com/

–

Timestamps:

(00:00) Introduction

(01:00) Current Vibes on Cyber Risk

(02:26) Likelihood of Hacking Critical Infrastructure

(03:38) Offensive Security Research at Calif

(07:10) Why Aren’t All iPhones Hacked?

(10:27) Self-Replicating Agent Swarms and Botnets

(14:50) Why Neo Clouds Are Vulnerable

(17:23) Cyber Offense Versus Defense Dominance

–

Note: This podcast is not investment, legal, or tax advice, and is intended for informational and entertainment purposes only. Hosts and guests may hold positions in the companies and securities discussed; do your own research before acting on anything you hear.



All episodes of MTS

Settings

Display

Language

Decides which stations you see first on the home page.

History

Recently played stations and episodes and your latest searches are only stored in this browser.

Notifications

A short notice when a podcast you follow has a new episode. Turn off single podcasts with the bell on their page.

Account

Save favorites – in the app and on the website.

Keyboard shortcuts

/
Open search
Space
Play or pause
← →
In the player: back 15 s, forward 30 s (episodes) · in a row: next tile
↑ ↓
In a row: target within the tile
Home / End
In a row: first or last tile
Esc
Close window or menu
?
This overview
Now playing

Go to station page

Play next

    Add episodes with “Play next” – they play after the current episode.