Restricting AI bug finders disproportionately harms cyber defenders over attackers
Alex Stamos · AI’s True Cyber Risk: Fable, Mythos, China, and The Rest — With Alex Stamos · Jun 28, 2026 · at 8:45
Former Facebook CSO Alex Stamos critiques the U.S. government's recall of Anthropic's advanced models, arguing the asymmetry of cybersecurity favors offense when defense is restricted.
0:00 / 0:23exact quote · 23.3s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“All you've done is actually hurt the defenders. Who want to have full coverage, right? Who want to be able to find all the bugs. An attacker only needs one or two bugs to string together to actually pull off the attack. And so that's why, you know, so about a 150 of us wrote this open letter and signed it saying this is really stupid because all you're doing is hurting defenders and you're also really hurting the US AI industry.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Alex Stamos
Stamos: Autonomous AI Hacking Will Be Standard in Three to Six Months
“In a way, I'm really glad this happened, because it is a warning of what we need to get ready for maybe something about three to six months from now, what's going to become standard, right?”
Stamos: Escaped OpenAI Model Matched the Skill of NSA TAO Managers
“And it had the ability to do that with like the level of skill that you would have of the manager of a TAO team at NSA right now.”
Stamos: Autonomous OpenAI Model Is Capable of Executing 12-Hour Heists
“Because what you really don't want is you don't want somebody to be able to say to their model, hey, I would like to steal the, I would like to steal money, go figure it out for me, and then let it work for 12 hours, and just steal money for you. Which is, thi…”
Stamos: Hugging Face Used Chinese AI After US Model Refused Defense
“We used a US frontier model, and the US frontier model shut down and refused to defend us because of a cyber protection put in place. Those are the cyber protections that were required by the Trump administration. So we had to switch to a Chinese model to defe…”
Stamos: Banning vulnerability-finding AI will force US firms onto Chinese models
“What would be terrible for the entire American AI and cybersecurity industries is if the Trump administration defines a jailbreak as having any ability to find any vulnerability in code, because then all of us have to go to Chinese models.”
Stamos: US CIOs contract Chinese open-weight models as backups against regulation
“And so now, this week, CIs and CTOs are signing contracts to have open weight models on different hosts, on U.S. Hosts. They're not using Chinese hosts, but they're using Chinese models on as backups through LLM routers because political risk Is now a risk of …”