The Biggest Shift in Cybersecurity in 30 Years

The Biggest Shift in Cybersecurity in 30 Years

Source: YouTube · a16z · published Oct 6, 2026 · 47:38

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

Kevin Mandia explains why he returned to cybersecurity with Armedi(n), an AI company using frontier models on offense to find exploitable risk and build autonomous AI defense 2:05.

Key Takeaways:
• Mandia joined after meeting an exceptional founding team — he "didn't want to sit out the AI shift change" after 30 years in security 2:05
• Armedi(n) Red finds exploitable risk via AI attacks; Blue builds compensating controls — "you don't have a defense unless you have a great offense" 3:12, 11:00
• AI attacks dwarf humans in scale and speed — what AI does in a microsecond would take 70 humans — and open models are already good enough 5:50
• Since January 2026, Armedi(n) has found 90+ zero days at Fortune 500 sites via black-box internet testing, with the latest found autonomously by AI agents 16:43
• Human-in-the-loop response is too slow against agentic attacks proliferating at shocking speed; autonomous defense is required 23:04
• Today's builders need funding, speed, branding, and rapid go-to-market — unlike the self-funded Mandiant era 40:03

Both offense and defense face a desperate window, but long-term autonomous AI defense will outperform humans; the next year will be chaotic as every tech stack is rebuilt for AI 25:07.

Sources:

  • 2:05 Motivation and founding team
  • 3:12 Red/Blue strategy
  • 5:50 AI attack scale and speed
  • 16:43 90+ zero days, AI agents finding them
  • 23:04 Agentic proliferation speed
  • 25:07 Desperation window
  • 40:03 Modern startup requirements

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

You don't have a defense unless you have a great offense to go up against. You want to be the Baltimore Ravens [music] defense of 2000. You kind of want to have your practice offense really push you. That's what Arman's going to do. We're going to be the all-star team on offense [music] coming at you so you can train your defense with what we're doing. You built mandate a great success. Why did you decide to get back on the field? >> I don't want to sit out the AI shift change when I've done 30 years in [music] security and the whole damn thing's about to change. What AI does in a microcond would take 70 humans. They can't even do it. It's apples to oranges. [music] This is a tsunami like has never been seen before in security. >> The whole let's slow down the models. We don't want cyber t…