Oct 22, 2026 · 1h 56m
AI turns cybersecurity into an arms race for infrastructure
Matthew Prince on PHP2Shell, iPhone Duo Early Reactions, Meta Unveils New Class C Stock | Matthew Prince, Kevin Weil, MC Lader, Dillon Baxter, Richard Starson, Brian Manning
The episode connects a newly disclosed web vulnerability to a broader shift in which AI, robotics, defense systems, and satellites reshape economic and national resilience.
- 1PHP2Shell shows how quickly simple exploits can spread once a vulnerability is publicly patched and attackers mobilize.
- 2AI may accelerate both vulnerability discovery and cyberattacks, but cloud partnerships and better defenses can narrow the gap.
- 3Robotic laboratories, microwave defenses, biodegradable packaging, and satellite navigation point to a new wave of industrial rebuilding.
Don't miss
Matthew Prince links PHP2Shell to a future in which AI agents could overwhelm human internet traffic and transform content distribution and economics.
The brief
Matthew Prince explains how OpenAI and security researchers uncovered PHP2Shell, why attacks surged after disclosure, and why the flaw mostly concerns vulnerable servers rather than ordinary consumers.
The cybersecurity discussion widens into an AI arms race: simple scripts can exploit old weaknesses, while stolen credentials and compromised infrastructure give attackers more compute and tools.
Prince argues that AI-assisted vulnerability discovery is frightening but useful, because automated analysis may expose and fix flaws that have survived for years.
The episode then surveys industrial bets: Warp’s robotic drug labs, Cognition’s vertical AI services, PlantSwitch’s biodegradable packaging, Stelius’s microwave defenses, and Zona’s satellite GPS alternative.
The through line is strategic rebuilding, from domestic pharmaceutical research to resilient navigation, alongside debates over Meta’s control structure and Apple’s unfinished iPhone Duo software.
What was said on this episode
33 statements · 22 positive · 8 negative · 3 neutral
PHP is used by approximately 70% of the web.
“About 70% of the web uses it.”
Listen at 1:54
Cloudflare is seeing millions of PHP-related attacks per minute.
“we're now seeing millions of attacks per minute across our network”
Listen at 5:19
Web-server operators running PHP should install the latest PHP version.
“if you're running a server right now, get it updated with the latest version of PHP.”
Listen at 5:30
Unupdated browsers and operating systems may trust compromised certificates and be spoofed.
“until you upgrade your browser, until you upgrade your operating system, then you might still be trusting these certificates and your browser could be spoofed.”
Listen at 8:40
The next two years will be highly fraught with cybersecurity vulnerabilities.
“I think the next two years are going to be incredibly, incredibly, incredibly fraught.”
Listen at 9:08
AI is helping defenders by discovering existing vulnerabilities rather than creating them.
“AI is not the bad guy here. AI is the good guy. AI didn't create these vulnerabilities. AI found them.”
Listen at 9:34
AI-assisted security efforts will make the internet more secure.
“I think the Internet is going to get more secure.”
Listen at 10:22
Current PHP exploiters use simple scripts to scan online servers and IP addresses.
“they're just running fairly simple scripts that are just trying to check every single server, every single IP address online to see if it's vulnerable to take it over.”
Listen at 11:32
Large AI agent-swarm cyberattacks currently cost hundreds of thousands or millions of dollars.
“the cost of running that type of attack, an agent swarm like that, is still extremely expensive. Hundreds of thousands, if not millions of dollars.”
Listen at 13:18
AI currently benefits cyber defenders more than attackers.
“right now, I think that AI is actually helping the good guys more than it's helping the bad guys.”
Listen at 13:54
Token theft and inference-provider compromises give attackers access to AI tools.
“stealing tokens, hacking inference providers, that's giving them access to tools.”
Listen at 14:49
Cloudflare is using AI tools to deploy proactive swarms of cyber defenders.
“using AI tools and using things that can actually proactively have a swarm of defenders that are looking out for the swarm of attackers.”
Listen at 16:00
Major vulnerabilities will be released almost weekly for the next two years.
“for the next two years, we're going to basically have kind of a week like this on average almost every week where big vulnerabilities are getting released.”
Listen at 19:32
AI will make classic programming bugs nearly impossible within two years.
“two years from now, I think it's going to be almost impossible to write buggy code”
Listen at 21:20
AI security tools will substantially improve internet security and public welfare.
“the internet's going to get a lot more secure and we're all going to be better off because of these tools and how they're helping.”
Listen at 21:58
Agent traffic could reach 1,000 times human traffic within five years.
“if current trends continue in five years, automated traffic, agent traffic is going to be a thousand times human traffic.”
Listen at 25:32
Internet resources will likely be funded through agent micropayments.
“my hunch is it's probably some version of micropayments that every time you access a resource, your agent pays”
Listen at 26:24
Agent-targeted advertising and payments may solve the internet’s commerce problem.
“that's going to be, I think, a big part of how we solve what is otherwise just in a massive tragedy, the commerce problem.”
Listen at 27:19
Journalism needs a compensation system for original reporting.
“we've got to have some system. that allows the people who are doing that work to get compensated”
Listen at 28:46
Meta Class C buyers will primarily value financial returns rather than voting rights.
“Realistically, the buyers of this are only interested in the financials. They don't care about the vote. So it doesn't really matter.”
Listen at 42:28
Leaving California before a billionaire tax takes effect is rational for Zuckerberg.
“I do think that it's completely rational to get out of California before it hits.”
Listen at 42:43
Robotic laboratories will accelerate scientific research.
“robotics and robotic labs are going to accelerate science”
Listen at 47:48
Robotic labs can generate large-scale data for training scientific AI models.
“these kind of labs can generate data at huge scale to train amazing AI models for science.”
Listen at 47:57
The United States should reshore pharmaceutical scientific capabilities from China.
“we need to reshore scientific capabilities from China”
Listen at 48:04
Almost all pharmaceutical pipelines include substantial work performed in China.
“almost all of them had big parts of their programs that happened in China.”
Listen at 49:00
The United States should retain domestic drug-development capabilities.
“We don't want to lose the ability to turn ideas into medicines here in the United States.”
Listen at 50:33
Drug-molecule optimization commonly takes three to five years and is outsourced to China.
“there's this like three to five year process and that entire process is outsourced to China.”
Listen at 52:03
The U.S. pharmaceutical contract-research market is large and growing.
“there's not just a big market today. There's a big and growing market going forward.”
Listen at 53:29
Laboratory robotics is still early in its adoption S-curve.
“robotics is just at the beginning of the S-curve”
Listen at 54:03
Robotic labs can reshore pharmaceutical research and generate data for advanced scientific AI.
“we need to reshore this from China, and this is the way that you generate data at scale that will allow us to build the next generation of incredible scientific AI models.”
Listen at 55:54
AI-designed drug development will create demand for substantially more physical drug testing.
“the thing that's going to come when AI is able to develop and to design more drugs is then we're going to need to test way more drugs.”
Listen at 56:28
Warp should build its automated CRO from scratch rather than retrofit an existing one.
“I think you just need to build from scratch with the idea that you're looking to automate this from day one”
Listen at 57:34
iPhone Duo software problems will likely be patched quickly.
“I think the software gets patched pretty quickly.”
Listen at 1:49:45
Statements are attributed to the speaker as said on the episode and reflect their view at the time, not PodLume's. They are not advice.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.