Michael Lubas on AI, Attack, and Defense

Podcast: Elixir Mentor · Jacob Luetzow

Opublikowano: 2026-05-16

Michael Lubas, CEO of Paraxial.io and my first-ever guest, returns to talk about AI's dual role in cybersecurity: finding vulnerabilities and writing the code that creates them. We open with the Hex package manager penetration test Paraxial ran under the Erlang Ecosystem Foundation's Aegis initiative, funded through Alpha Omega. Michael caught a remote code execution bug before it shipped. From there we cover GitHub Actions supply chain attacks, why every maintainer should run zizmor, and campaigns that target release pipelines instead of application source. Then the AI inflection point. The EEF's CNA issued nine...