Joel De La Garza is joined by Dylan Ayrey, co-founder and CEO of Truffle Security, and Feross Aboukhadijeh, founder and CEO of Socket, to discuss one of the biggest shifts happening in cybersecurity: AI models are no longer just finding vulnerabilities—they're exploiting them. As frontier models become increasingly capable of hacking, software security, supply chain attacks, and cyber defense are entering a fundamentally new era. The conversation explores AI-powered hacking, software supply chain attacks, leaked credentials, zero-day vulnerabilities, package manager security, and why the path of least resistance for increasingly autonomous AI systems may also be the most dangerous. They also discuss what enterprises, developers, and the open-source ecosystem need to do to adapt as the gap between vulnerability discovery and exploitation continues to shrink.   Resources: Follow Dylan Ayrey on X: https://x.com/InsecureNature [https://x.com/InsecureNature] Follow Feross Aboukhadijeh on X: https://x.com/Feross [https://x.com/Feross] Follow Joel De La Garza on LinkedIn: https://www.linkedin.com/in/3448827723723234/ [https://www.linkedin.com/in/3448827723723234/] Stay Updated: Find a16z on YouTube: YouTube [https://www.youtube.com/@a16z] Find a16z on X [https://x.com/a16z] Find a16z on LinkedIn [https://www.linkedin.com/company/a16z] Listen to the a16z Show on Spotify [https://open.spotify.com/show/5bC65RDvs3oxnLyqqvkUYX?si=3E8B3qT9TyiwAHJ7JnaKbg] Listen to the a16z Show on Apple Podcasts [https://podcasts.apple.com/us/podcast/a16z-podcast/id842818711] Follow our host: https://twitter.com/eriktorenberg [https://twitter.com/eriktorenberg] Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com [https://pcm.adswizz.com] for information about our collection and use of personal data for advertising.