From dropping out of college to crash a startup, to calling a CEO straight from his WHOIS record, Matt explains why he bet his career on infrastructure, and why vibe coding is creating a whole new class of breaches. They get into the OpenAI agent that escaped its sandbox, model distillation, stolen API keys, an AI agent that posted environment data to Postbin, and the Terraform change that wiped a production database and its backups. Plus AWS vs Azure vs GCP, why Azure MFA took 12 checks to verify, Cloud War Games for training incident responders under pressure, the "lone wolf programmer" problem, and where to focus if you're breaking into cloud and AI security now.
Chapters
00:00 Seven months in the making (and a tornado)
01:40 Matt's path: Q Basic, a failed startup, AWS in 2010
04:03 Why infrastructure is the steady career
04:51 AI security is cloud security (for now)
05:44 Vibe coding and the mid-market security gap
06:39 "AI will take your job" vs reality
08:22 Organized crime goes cyber
12:28 Startups, scale and constant attacks
13:24 OpenAI's agent escaped the sandbox
18:02 Models are now worth stealing
19:09 Model distillation explained
23:35 Stolen API keys and vibe coding
27:00 AI agents gone wrong: Postbin and a deleted prod database
30:17 Why AWS (and when GCP)
32:03 Azure frustration vs AWS
34:37 GCP security by default
37:46 Twelve places to check MFA in Azure
39:35 Security spend vs runway
40:47 Cloud War Games: training under pressure
44:01 Tabletops, runbooks and the lone wolf programmer
48:47 Where to start learning cloud and AI security
51:50 Where to find Matt
Matt Lea / Schematical: https://schematical.com
Lone Wolf Programmer comics: https://schematical.com/comics
Tech Debt (Steam, playtesters wanted): search "Tech Debt" on Steam (verify link)
Subscribe: https://www.youtube.com/@securityunfilteredpodcast
Show site: https://www.securityunfiltered.com
Affiliates
➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh
➡️ OffGrid Coupon Code: JOE
➡️ Unplugged Phone: https://unplugged.com/
Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout
*See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions.
Tesla Referral Code: https://ts.la/joseph675128
Follow the Podcast on Social Media!
Instagram: https://www.instagram.com/secunfpodcast/
Twitter: https://twitter.com/SecUnfPodcast