Engineer. Founder @riskiq (acq. MSFT), Former CVP Microsoft Security, Founder and CEO @Ent_Security
San Francisco, CA
Joined April 2007
- Tweets156
- Following396
- Followers303
- Likes3.7K
USA behind on robotics
The 2026 World Humanoid Robot Games have begun. 666 teams from around the world are competing with more than 2,000 humanoid robots bloom.bg/4c6KRYG bloomberg.com/news/videos/20…
Some forget that San Francisco had a planned Athenaem at the top of Twin Peaks complete with a 300ft statue.
Hellenism inspires personal improvement through excellence. It’s a framework for realizing human potential. It belongs to all of us.
Always be shipping
AI has compressed the defender’s window from months to hours.
Ent’s latest release brings intent-aware prevention to AI tools, sensitive data, and high-risk apps, with decisions made on the endpoint.
See what’s new: na2.hubs.ly/H06YBSx0
#Cybersecurity #AISecurity
Security is the key unlock to killing the browser and accelerating the next chapter of the web. ChatGPT Enterprise will offer security just like Microsoft.
Build beautiful housing. SF innovates like no other place and attracts top talent from everywhere. When it comes to certain issues that get solved in other cities we just get stuck. What’s really going on?
A software engineer making $185K can't even afford to rent a one-bedroom in San Francisco.
A good salary used to buy you a home. Now it barely covers rent. For decades, we've made it nearly impossible to build, so even top earners are priced out.
The new fault line in American politics isn't rich vs. poor. It's people who own, and people who earn.
Just in time for Kimi K3. Guardrails and usage limits push devs and security teams toward self-hosted and open-weight models.
Beginning July 20, Claude Fable 5 will be included in all Max and Team Premium plans, at 50% of limits.
Pro and Team Standard users will continue to have access to Fable via usage credits, and will receive a one-time $100 credit.
Demand for Fable has been challenging to predict, which is why we rolled it out to subscription plans in stages, extending access several times as we secured additional capacity.
Some more points here on this..
Commercial APIs blocked defenders. Scary and bad but not surprising, this was one of the concerns coming out of the Mythos debate around America staying competitive, a Digital 2nd Amendment and right to bear technology.
And "autonomous, AI-driven offensive tooling is no longer theoretical." Also bad but our new reality, many saying this.
I am concerned with the use of speed in this sentence, the HF blog says, "we were able to do in hours what would usually take days, and match the adversary's speed."
But the attacker already won and damage done. Great we did detect and respond and limited further damage.
Hours too long against an AI that works in mins or seconds. Current security architectures are not designed for this and to intervene at these speeds.
huggingface.co/blog/security…
I find more and more of my childhood tech dreams coming true or being debated as possible. This is one I had as a kid in chgo. And now as an adult kid in SF. Even the burbs, road noise, yard maintenance is a constant. Tech feels possible, please someone grind on this and see if it is practical.
Want to know what else benefits, that we can’t afford to lose? Cyber Security. AI unlocks an opportunity to secure everyone. Security is a core pillar of computing.
We need to keep building if we want to lead in cyber security.
🇺🇸 AMERICAN DATA CENTERS 🇺🇸
Excellent piece in FT by my friend @joshzoff arguing that the US can't treat data centers like we treated rare earths, and that data centers are a great way to finance development of a bunch of other advanced technologies (strong agree).
Good move.
One of the things we struggled with while I was at Microsoft Security was what I called the “last mile” problem. Customers increasingly wanted outcomes, not more tools. Yet every time a new threat emerged or a new attack surface appeared, our industry’s instinct was to add another product.
In cybersecurity, the best outcome is prevention. If you can stop an incident before it happens, you eliminate all the downstream cost, complexity, and disruption while giving people the confidence to do more.
That’s why this shift toward outcomes is so important. As AI becomes the platform, we need a purpose-built security architecture that replaces fragmented point solutions with an intelligent foundation that evolves as AI does.
The future of the firm is a learning loop in which human capital and token capital compound.
With our new Frontier Co., our ambition is to help every enterprise build its own AI capability, and to help create a frontier ecosystem where every organization can turn its knowledge, workflows, and judgment into its own AI systems that continuously improve. blogs.microsoft.com/blog/202…
Two weeks ago we announced @Ent_Security and our $100M seed.
@bsdixoner and I started Ent because we believe AI has fundamentally changed cyber offense.
It discovers vulnerabilities.
It develops exploits.
It operates at machine speed.
It magnifies human error and creates entirely new attack vectors.
Everyone is talking about AI-powered offense.
We're building AI-powered prevention.
The security architecture has to change.
ok, so I have had about 100 of these convos so you got me on the 200.
Some comments on the #2 surprise below on Sovereignty. This is NOT a suprise. Organizations I talk to want to take back control of their data and leverage it to build organizational context. Too much data is siloed in a variety of disparate cloud systems that are too slow.
Local and edge compute (under the organization's control) is something I firmly believe in and is the only way to guarantee confidentiality and privacy of the data.
AI systems should be built with a local/edge first architecture with fallback to the cloud.
Result: more flexibility and optionality in general, control over models, data sovereignty, end-user privacy protections allowing users to store sensitive data on their own device and lower latency leading to a better user experience.
Just finished north of 200 meetings in Europe with customers and technologists. The conversations were primarily around AI, common questions include:
1. Are there examples of organizations who have been able to demonstrate production level systems and do those developments show a return in lower cost, efficiency or better top line?
2. What do you think about agents? How will we discover, govern and stop agents if need be. Perhaps the biggest security concern ATM.
3. The frontier AI models are expensive, what's the business case at these token prices to embed AI in our customer facing products? Where will token prices be in the future.
4. What are the longer term implications of Mythos like models? Do we need to update cyber infrastructure or all IT infrastructure?
5. What do you think of Chinese opensource models? Are they secure and what is the downside of using them if they can be secured and they are cheaper?
The parts that surprised me were:
1. The pausing of Mythos and Fable 5 caused more consternation and concern in Europe both short term and raised longer term concerns on single model reliance or reliance or models not in ones control. I hadn't seen it from their POV.
2. Sovereignity which was always a topic and still is, is getting more nuanced - they want data residency, data localization and local resources, but there seems to be more willingness to accept global services on clouds. Classified systems continue to be an issue.
Net net - we need to ensure we continue to build trust both on our Frontier models and their consistent availability, we need to get the right economics in place and spend more time in Europe communicating and building presence if we want AI adoption to keep pace with the US.
Elias Manousos retweeted
Founders must stop trying to building 2010-era businesses with 2026-era technology.
Don't try to rebuild Foursquare or Yelp.
Don't try to recreate Basecamp by 37 Signals with $10/mo SaaS pricing.
Don't underprice! If it works it's worth a lot more.
Don't be tempted to become "Tech enabled PE" with revenue tricks.
The rules of tech changed with AI. Play the new game.
How far down will this rabbit hole go? Given it worked probably pretty far.
RiskIQ's Team Atlas, our Threat Intelligence Analysis Team, Illuminated new patterns and 56% more threat infrastructure used in the #SolarWinds #CyberEspionage Campaign, including more than a dozen C2 servers from the attack's second stage: bit.ly/2QmQ1Jn
Elias Manousos retweeted
In his young career, @ydklijnsma had already made an undeniable and indelible impact on the security community. We'll never forget his brilliance, kindness, and passion for making the world a better place. We'll miss you, Yonathan: bit.ly/3nGn8m3
Go get ‘em
.@RiskIQ has just released the entirety of its unique and expansive holdings relating to the Ryuk ransomware.
We are exposing all known infrastructure upon which the threat actors behind the attacks currently rely. community.riskiq.com/article…
