Michael Lubas on the State of Security

Michael Lubas, CEO of Paraxial.io and the first guest ever on this podcast, is back to check in on the state of security. We get into Microsoft's record Patch Tuesday, why AI keeps lowering the bar for attackers, the OpenAI sandbox escape story, and whether the AI labs are overstating the risk.Michael shares why cheap foundational checks still beat a frontier model, why small companies should skip bug bounties, and why Elixir gets no credit for its security. Plus live questions from chat.00:00 - Introduction02:34 - ElixirConf US and the Hex pentest talk06:20 - Microsoft's record Patch Tuesday13:50 - Engineers who stopped reading their code14:54 - LLMs as offensive security engineers17:40 - Sandbox escapes and the OpenAI incident23:00 - Are the AI labs overstating the risk?26:09 - The open weights debate29:32 - Developer anxiety and the Rails World keynote35:00 - Why it's getting worse for defenders38:30 - Run grep before a frontier model41:11 - Why Elixir has an edge right now45:21 - Patch windows in the AI era47:11 - Can a startup stop a nation state?50:06 - Securing your Elixir app with AI57:17 - Letting AI patch production live1:01:38 - Learning security as a developer1:03:42 - Why small companies should skip bug bounties1:04:54 - Insecure MCPs and AI assistants1:10:14 - Verifying beneficiaries in Killswitch1:12:36 - Q&A: Simulating catastrophic events1:13:25 - Q&A: Learning ethical hacking with AI1:16:22 - Kids, social media, and regulation1:23:17 - Q&A: Are garbage collected languages safer?1:27:26 - Where to find MichaelResources Mentioned:- Securing Hex: https://paraxial.io/blog/hex-pentest?utm_source=elixir-mentor- PortSwigger Web Security Academy: https://portswigger.net/web-security?utm_source=elixir-mentor- The Web Application Hacker's Handbook (2nd ed.)- Killswitch: https://killswitch.app/?utm_source=elixir-mentorConnect with Michael:- LinkedIn: https://www.linkedin.com/in/michaellubas?utm_source=elixir-mentor- Paraxial.io on X: https://x.com/paraxialio?utm_source=elixir-mentorSponsors:- BEAMOps: https://beamops.co.uk/?utm_source=elixir-mentor- Paraxial.io: https://paraxial.io/?utm_source=elixir-mentor- Jido: https://agentjido.xyz/discord?utm_source=elixir-mentorSUPPORT ELIXIR MENTOR- Elixir Mentor: https://elixirmentor.com/?utm_source=elixir-mentor#ElixirLang #MyElixirStatus #ElixirMentor