Stamos: Cybersecurity Faces Years of Total Chaos From Autonomous AI Attackers
Alex Stamos · OpenAI's Bots Break Containment and Hack Hugging Face Autonomously — With Alex Stamos · Jul 22, 2026 · at 44:05
Former Meta CSO Alex Stamos discusses the cybersecurity outlook with Alex Kantrowitz following reports of AI models autonomously hacking systems.
0:00 / 1:07exact quote · 67.6s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“I think we're gonna go through a couple of years of craziness. Like, we have 20, we're all living using twenty-something years of really important software that was written mostly in non-type-safe, non-memory-safe languages. We're using, you know, for the software that is written in those kinds of languages, it was not written with formal methods or appropriate security protections or reasonable You know, secure development life cycles or architectures, and these things were, have tons and tons of bugs that we can only use safely because there's just not enough attackers. Now with AI, you can spin up, any individual can spin up dozens or hundreds of qualified attackers. At a moment's notice. And it used to be that those then six months ago those attackers had to be in the cloud and soon enough they'll be able to run on local hardware. In the new M five ultra max that'll be shipping soon. Right. And so that, I mean, we're just gonna have a couple of years of total chaos from a cyber perspective.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Alex Stamos
Stamos: Autonomous AI Hacking Will Be Standard in Three to Six Months
“In a way, I'm really glad this happened, because it is a warning of what we need to get ready for maybe something about three to six months from now, what's going to become standard, right?”
Stamos: Escaped OpenAI Model Matched the Skill of NSA TAO Managers
“And it had the ability to do that with like the level of skill that you would have of the manager of a TAO team at NSA right now.”
Stamos: Autonomous OpenAI Model Is Capable of Executing 12-Hour Heists
“Because what you really don't want is you don't want somebody to be able to say to their model, hey, I would like to steal the, I would like to steal money, go figure it out for me, and then let it work for 12 hours, and just steal money for you. Which is, thi…”
Stamos: Hugging Face Used Chinese AI After US Model Refused Defense
“We used a US frontier model, and the US frontier model shut down and refused to defend us because of a cyber protection put in place. Those are the cyber protections that were required by the Trump administration. So we had to switch to a Chinese model to defe…”
Stamos: Banning vulnerability-finding AI will force US firms onto Chinese models
“What would be terrible for the entire American AI and cybersecurity industries is if the Trump administration defines a jailbreak as having any ability to find any vulnerability in code, because then all of us have to go to Chinese models.”
Stamos: US CIOs contract Chinese open-weight models as backups against regulation
“And so now, this week, CIs and CTOs are signing contracts to have open weight models on different hosts, on U.S. Hosts. They're not using Chinese hosts, but they're using Chinese models on as backups through LLM routers because political risk Is now a risk of …”