Resilient Cyber w/ Joshua Saxe - Why Restricting AI Makes Us Less Secure

Does restricting frontier AI in the name of safety actually make us less secure? Joshua Saxe joins me to make the case that it does, and that AI cybersecurity will be won through defender adoption, not restriction.Josh has spent 15 years at the intersection of AI and security. He built and ran the machine learning program at Sophos, then led security for Llama at Meta, covering security post training, evals, agent guardrails, and prompt injection prevention. He recently left to co-found a startup reimagining vulnerability and exposure management agentically. He also writes one of the most cited blogs on AI and cyber policy.In this episode:- Why restricting frontier model access harms defenders more than attackers- How monitored closed models put threat actors at a structural disadvantage- The jagged frontier, and why attackers don't need frontier models for most of their tradecraft- The national security and supply chain risks of pushing the world onto Chinese open weights models- Why exploits don't cause cyberattacks, and which attacker constituencies AI actually unblocks- The dual use ceiling on guardrails and classifiers- Where defenders should be adopting AI right now, from access management to SOC automation- Using agents to burn down the mountain of security technical debtChapters:0:00 Intro0:42 Josh's background, from blackhat teen to Llama security lead3:07 The case for diffusion over restriction6:14 Why restriction hurts defenders more than attackers10:19 The jagged frontier and what attackers actually use models for12:49 National security and the supply chain risk of Chinese open weights16:08 Exploits don't cause cyberattacks20:20 Where defenders should adopt AI right now24:20 Guardrails, classifiers, and the dual use problem27:34 Reimagining vulnerability management with agents32:17 The structural advantage defenders hold35:15 Policy wishes and the attacker's Claude Code momentFollow Josh:LinkedIn: https://www.linkedin.com/in/joshua-saxe-01845a1Substack: https://joshuasaxe181906.substack.comFollow Resilient Cyber:Substack: https://www.resilientcyber.ioSubscribe for more conversations with security practitioners and leaders.#aisecurity #cybersecurity #vulnerabilitymanagement #aipolicy #opensourceai