Blue Security

The episode contains several genuinely useful data points - AI code security degradation stats, exploit timeline compression, and a nuanced capex decomposition - but these are interspersed with long stretches of general opinion, personal anecdotes, and meandering tangents that dilute the density considerably. Maybe 20 minutes of substance in 64 minutes.

“the meantime from CVE publication to a ah, working exploit back in 2024 was only 56 days. In 2025 it has been reduced to 23 days and now in 2026 it sits at 10 hours”

“45% of AI generated code actually contained OWASP top 10 vulnerabilities. Now even after two years of model improvements, that number hasn't moved”

The framing of AI job cuts as financial scapegoating rather than genuine automation, and the specific capex accounting nuance (half going to long-lived assets), are moderately fresh angles. However, most of the discussion - Brad Smith's 5 Cs, China threat, sycophancy critique - recycles widely circulating takes without adding genuinely new frameworks.

“AI is a convenient kind of boogeyman, but also as peacocking for Wall street, where you are suggesting, and I do not think this is remotely true, that we are so far down this path we are able to displace thousands of jobs with AI”

“about half of that capex goes to what we refer to our uh, long lived assets... Things that last a long time, like we're talking decades or more”

There are no guests - only two co-hosts who are Microsoft security sales employees. While they have relevant industry proximity, they are not senior practitioners, researchers, or executives who have operated at scale in security or AI; much of the authority comes from proximity to their employer rather than personal depth.

“Andy and I both work for Microsoft in our field, security sales”

“we do. I'm going to open up with Brad Smith who is a Microsoft, um, vice chairman and president for Microsoft”

The episode does cite named studies (Vera Code, MIT), specific companies (Block, DeepSeek, Meta), named individuals (Janelle Gale, Debbie O'Brien), and concrete figures (OWASP failure rates, capex totals, S&P 500 concentration). However, several citations are loosely attributed and some numbers appear imprecise or unverified in delivery.

“Meta's entire global payroll is about $27 billion. Their AI infrastructure budget is about, about 125 to $145 billion”

“Vera Code is one of those code security tools. Their company and they tested like a hundred LLMs across 80 coding tasks. And they said that 45% of AI generated code actually contained OWASP top 10 vulnerabilities”

This is a collegial two-host conversation where both parties largely agree with each other throughout; there is no real probing, challenging of claims, or productive disagreement. Andy largely sets up topics from prepared notes and Adam riffs in agreement, with the format functioning more as co-narration than genuine interrogative dialogue.

“Yeah, no, I think, I think it's a fair point right”

“I hadn't even read down that far in the time, um, the rundown, dear listeners. I brought up Block and Jack Dorsey. It was kind of throwing shade at it. And I didn't see it was three bullet points down”