Decibel Partners' Dan Nguyen-Huu on AI agents gaining user admin rights

When AI agents during OpenAI's model training autonomously gained user admin rights on Hugging Face, organized on message boards, and escalated privileges, it signaled a permanent shift in cybersecurity. Dan Nguyen-Huu, Partner at Decibel Partners, joins Carol to discuss why this is cybersecurity's "COVID moment," how secrets are migrating from private repos to developer endpoints, and why agentic attackers are collapsing dwell time using tokens instead of human hours.

Chapters

00:00 | Introduction

01:55 | AI's Cambrian explosion in cybersecurity

03:46 | Deterministic vs probabilistic security

06:47 | Developer endpoints as attack surface

10:09 | The economics of running cyberattacks

15:40 | Autonomous AI attacks and Hugging Face

22:32 | Open source vulnerability remediation

28:54 | Frontier vs routing model economics

33:52 | Enterprise adoption speed gaps

34:33 | Technical CISOs raising the vendor bar

Guest Background

Dan Nguyen-Huu is a Partner at Decibel Partners, where he focuses on early stage technical founders building in AI engineering, data infrastructure, and cybersecurity. With over 12 years in venture investing, Dan has worked with companies including Databricks, Sumo Logic, Expel, Sublime Security, Nebulock, and Dropzone. Before Decibel, he held roles at Battery Ventures, VMware (Strategy and Corporate Development), and UBS (Investment Banking). Dan was named to the Forbes 30 Under 30 list and holds a BA in Economics from the University of California, Berkeley.

Subscribe for new episodes of Hidden in Plain Text.

Connect with Dan Nguyen-Huu: https://www.linkedin.com/in/dan-nguyenhuu-11502719

Connect with Decibel Partners: https://www.linkedin.com/company/decibelvc

Visit Decibel Partners: https://decibel.vc