XBOW Founder: “Your Infrastructure is Not Safe” | EP 28

This Week In Startups is made possible by:PaypalToday’s show:XBOW’s AI has held the top rank on the HackerOne leaderboard for more than a year. On TWiAI, founder Oege de Moor (who also built GitHub Copilot) tells us that no one’s infrastructure is truly safe anymore, now that open-weight models are trailing the American frontier by only a couple of months. Staging a serious cyberattack is now cheap and accessible, with attackers able to get dangerously solid results quickly from relatively cheap, open-source options from China.Guests:Runbin Dong on LinkedIn: linkedin.com/in/runbindongScale Social: https://scalesocial.ai/Oege de Moor on X: https://x.com/oegerikusXBOW: https://xbow.com/Relevant LinksWSJ: Nvidia-Poolside deal: https://www.wsj.com/tech/ai/nvidia-is-spending-6-billion-to-build-a-powerful-u-s-alternative-to-chinese-ai-c51c38ccPoolside: https://poolside.ai/Silicon Angle: Nvidia in talks to invest in Perplexity: https://siliconangle.com/2026/08/24/nvidia-reportedly-eyes-another-investment-in-perplexity-ai-at-a-30b-valuation/Perplexity: https://www.perplexity.ai/Bloomberg: Chinese hackers using DeepSeek: https://www.bloomberg.com/news/articles/2026-08-24/chinese-hackers-use-deepseek-to-boost-attacks-researchers-say-mt7o4205Nvidia: Groq 3 LPX enters full production: https://nvidianews.nvidia.com/news/nvidia-groq-3-lpx-now-in-full-production-with-world-class-speed-for-agentic-aiCNBC: Groq-Nvidia acqui-hire deal: https://www.cnbc.com/2025/12/24/nvidia-buying-ai-chip-startup-groq-for-about-20-billion-biggest-deal.htmlOpenAI on early Jalapeño results: https://openai.com/index/jalapeno-first-results/Stanley Druckenmiller WSJ op-ed: https://www.wsj.com/opinion/let-the-bond-market-speak-81529d74Druckenmiller confirms op-ed was authored with AI: https://www.notus.org/media/stanley-druckenmillers-wsj-op-ed-bessent-aiPangram: https://www.pangram.com/Alabama AG: OpenAI subpoena announcement: https://www.alabamaag.gov/attorney-general-marshall-launches-investigation-into-openai-and-sam-altman-for-massive-artificial-intelligence-data-breach/Ox Alpha on OpenRouter: https://openrouter.ai/stealth/ox-alphaApple: M6 and M5 Ultra press release: https://www.apple.com/newsroom/2026/08/apple-introduces-m6-and-m5-ultra-for-a-big-leap-in-performance-and-ai-compute/9 to 5 Mac: M5 Mac Studio launch: https://9to5mac.com/2026/08/25/apple-unveils-next-generation-mac-studio-with-m5-max-and-m5-ultra/DHH on X: Ubiquity comments: https://x.com/dhh/status/2087272392557007042Shane Parrish on X: Ubiquiti Wi-Fi set-up: https://x.com/shaneparrish/status/2088672566558761065Timestamps:0:00 Today's guests: Runbin Dong (Scale Social) and Oege de Moor (XBOW)2:12 Open-weight models are right behind the frontier8:22 Your infrastructure is not ready for what's coming13:07 Nvidia's Perplexity announcement16:43 Spending $2K/month on AI tools per employee21:59 Why security teams have to lean on AI25:19 The Great Chip Land Grab32:02 Jason's multi-agent restaurant-style workflow34:54 AI ghostwriting is lip syncing45:18 Are rogue AI agents breaking the law?52:38 The dangers of using a stealth model58:57 Apple's new M5 Mac Studio1:06:43 Everyone's fav AI tool of the momentSubscribe to the TWiST500 newsletter: https://ticker.thisweekinstartups.comCheck out the TWIST500: https://www.twist500.comSubscribe to This Week in Startups on Apple: https://rb.gy/v19fcpFollow Lon:X: https://x.com/lonsFollow Jason:X: https://twitter.com/JasonLinkedIn: https://www.linkedin.com/in/jasoncalacanisCheck out all our partner offers: https://partners.launch.co/Great TWIST interviews: Will Guidara, Eoghan McCabe, Steve Huffman, Brian Chesky, Bob Moesta, Aaron Levie, Sophia Amoruso, Reid Hoffman, Frank Slootman, Billy McFarlandCheck out Jason’s suite of newsletters: https://substack.com/@calacanis