1,000x more CVEs from AI-assisted discovery
Emilio Escobar worries that AI will uncover 1,000 times more CVEs than current processes, rendering existing 'fix everything' mandates unworkable.
Where this was said
The Real AI Security Threat: Volume, Not Escape
At 20:13 · chapter starts 18:04
Bloomberg's top story about AI going wild serves as the episode's final provocation. De la Garza pushes Escobar on why he seems so calm, and the answer is characteristically pragmatic: a gap is a gap. If an AI finds it first, fine. If a human attacker does, that's also fine — in the sense that the gap was always there [1] — Emilio Escobar "The AI-hacking threat is real but overblown. If an AI doesn't find your vulnerability, a human attacker will. Emilio Escobar's real worry i…" 18:04 . The panic around AI hacking, Escobar argues, actually serves a useful function: it forces conversations that weren't happening before. His genuine concern is more structural. The vulnerability remediation industry runs on the assumption that you can and should fix every CVE. AI-assisted discovery is about to invalidate that assumption entirely by generating orders of magnitude more findings. He's also worried about a secondary effect: the 'Greek god problem,' where vulnerabilities discovered by AI models are automatically treated as critical and definitive, inflating third-party risk management processes even further.
AI Hacking: Less Scary Than You Think
The AI-hacking threat is real but overblown. If an AI doesn't find your vulnerability, a human attacker will. Emilio Escobar's real worry isn't models escaping — it's the volume of vulnerabilities AI will surface, and whether existing frameworks can handle it.
The Greek God Problem: AI Findings Get Over-Credited
A vulnerability found by an AI model is getting treated as automatically critical and true — regardless of actual severity. Emilio calls this the 'Greek god problem,' and says it's about to make third-party risk management far worse.
Similar snapshots
Algorithm understanding drove Twitter growth
Quickly forming opinions on how the Twitter algorithm and platform worked allowed the speaker to grow rapidly on the platform.
MVP built in one week
Sam's initial MVP was coded in approximately one week using ChatGPT voice mode and copy-pasting code, with no prior technical experience.
Discord vs email for young users
Sam argues Discord is 10x better than email for building relationships with younger users who rarely check their inbox.
Monthly infra costs ~$780–$980
Sam's monthly operating costs include Cursor ($200), AI image generation ($100), AI video generation ($200), hosting ($100), email marketing ($80), and AI compute ($300–$500).
ChatGPT-powered pain point research
Sam recommends copying days of Discord chat history into ChatGPT and prompting it to list recurring pain points as a fast, free market research technique.
50 free tools built total
Bhanu and his team built approximately 50 free tools to attract search traffic, each linked back to SiteGPT.
New tool built in under 5 minutes
With AI coding tools like Cursor, Bhanu can now create a new free marketing tool in less than 5 minutes by referencing existing tools.
KD filter < 10 for rankable keywords
Bhanu filters Ahrefs keyword results to show only those with a keyword difficulty below 10, making them realistic ranking targets for any decent website.
Minimum 1,000 monthly search volume
Bhanu sets a minimum search volume of 1,000 monthly searches when selecting keywords to target with free tools.
