Everybody’s on the Security Team

DiDi and Lital open with banter about preseason football and segue into a humorous discussion of cheating-themed songs, contrasting guilty narratives like “Careless Whisper” with the blunt denial of “It Wasn’t Me,” expanding into a broader point about denial and staying quiet when questioned. They then shift to cybersecurity, arguing that as security companies and big tech firms (e.g., Cisco, Microsoft, IBM, Amazon, Palo Alto) scale, security stops being core because teams focus on shipping and revenue. They emphasize rebuilding “security DNA” by making training and secure coding mandatory, investing continuously in threat hunting and testing, and adopting an adversarial mindset where “everybody is on the security team.” Examples include Amazon’s realization that everything must be built through a security lens, Duo’s town-hall framing, lessons from breaches like RSA’s need for fast reseeding, and UX-driven security successes like Okta. They compare AI tools’ security posture (Codex vs. Claude), discuss weak authentication factors like SMS and push, recommend ongoing situational awareness via breach reports, and note how agents can inadvertently exploit API vulnerabilities.   Topics 00:28 Preseason Football Talk 01:17 Cheating Songs Debate 04:06 Wasn't Me Philosophy 05:56 Security Company DNA 08:56 Everyone Is Security Team 15:41 Security UX and AI Tools 21:10 Educating Teams on Threats 26:32 Agentic Attacks Example 28:55 Wrap Up and Goodbye