Loading video...

Video Failed to Load

Go Home

Secure by design means building security into software from the start. Episode 164 of Cybersecurity Where You Are explores how software vendors and developers can apply these principles and prove they’re doing it right.

CISecurity's profile picture

Center for Internet Security (CIS)

43,178 subscribers

44,782 views • 6 months ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Secure by design starts with action. Episode 164 of Cybersecurity Where You Are explores how software vendors can apply NIST’s Secure Software Development Framework and CIS guidance to strengthen security from the start. Listen now!
0:38

Secure by design starts with action. Episode 164 of Cybersecurity Where You Are explores how software vendors can apply NIST’s Secure Software Development Framework and CIS guidance to strengthen security from the start. Listen now!

Center for Internet Security (CIS)

78,937 views • 6 months ago

Forward Deployed Engineers from Palantir are the ideal people to build vertical AI startups Anyone can use these principles to learn about new industries yet untouched by software, and vibe coding means you can do it faster than ever
3:00

Forward Deployed Engineers from Palantir are the ideal people to build vertical AI startups Anyone can use these principles to learn about new industries yet untouched by software, and vibe coding means you can do it faster than ever

Garry Tan

246,029 views • 1 year ago

Global finance doesn’t fail from lack of innovation—it falters due to regulatory friction and inconsistent rules across borders. But what if compliance could adapt dynamically instead? 🤔 On #Unshielded, Jillian Plomin || W3i Software, Inc CEO explores a future where transactions are regulation-aware by design, revealing only what’s needed, where it’s needed. Full episode 👇
0:56

Global finance doesn’t fail from lack of innovation—it falters due to regulatory friction and inconsistent rules across borders. But what if compliance could adapt dynamically instead? 🤔 On #Unshielded, Jillian Plomin || W3i Software, Inc CEO explores a future where transactions are regulation-aware by design, revealing only what’s needed, where it’s needed. Full episode 👇

Midnight

27,789 views • 6 months ago

Evals 101: a new course from Braintrust. Everything you need to know about evals, and how to do them yourself. Module one: Why are evals important? - the six most common problems developers face when shipping AI applications - why traditional software thinking doesn't apply to AI - how evals can fix these problems
1:51

Evals 101: a new course from Braintrust. Everything you need to know about evals, and how to do them yourself. Module one: Why are evals important? - the six most common problems developers face when shipping AI applications - why traditional software thinking doesn't apply to AI - how evals can fix these problems

Braintrust

36,347 views • 2 months ago

We asked Dylan Field about organizational design in the age of AI, the importance of design. "As the inputs to software change, as more people are creating software, design becomes the differentiator." "Two decades ago, design was lipstick on a pig." "Design now is how you win or lose. We're going to start seeing so many more designer CEOs and design-oriented folks who are leading and shaping the future of software and companies." "Incredible designers are more in demand than ever. Good luck recruiting them because they have 50 other offers and infinite optionality."
3:34

We asked Dylan Field about organizational design in the age of AI, the importance of design. "As the inputs to software change, as more people are creating software, design becomes the differentiator." "Two decades ago, design was lipstick on a pig." "Design now is how you win or lose. We're going to start seeing so many more designer CEOs and design-oriented folks who are leading and shaping the future of software and companies." "Incredible designers are more in demand than ever. Good luck recruiting them because they have 50 other offers and infinite optionality."

TBPN

27,749 views • 11 months ago

ROCm 7 is built for developers: open, accessible, and fast. Mark Papermaster and Anush Elangovan break down how the AMD open software stack for AI makes it easier for developers in the latest episode of Advanced Insights. Watch this clip 👇 and see the full episode:
1:28

ROCm 7 is built for developers: open, accessible, and fast. Mark Papermaster and Anush Elangovan break down how the AMD open software stack for AI makes it easier for developers in the latest episode of Advanced Insights. Watch this clip 👇 and see the full episode:

AMD

18,665 views • 8 months ago

UNAPPROVED SOFTWARE ON VOTING MACHINES Watch Full Episode Here: On Episode 77 of Going Rogue with Lara Logan, cybersecurity whistleblower Robert Mancini walks Lara through a troubling discovery uncovered through public records and right to know requests. Mancini explains that a third party software, MathNet.Numerics, appeared on a voting system software manifest even though it was not listed in official certification reports from either the state or the Election Assistance Commission. Because voting machines are considered critical infrastructure, they operate on strict whitelisting standards where only approved software is allowed. The presence of unlisted, off the shelf software raises serious questions about oversight and compliance. According to Mancini, searches of EAC records and certification documentation showed no evidence that this software was ever tested or approved despite being present on the machines. Let Dr. Stella Help You Stock Your Medicine Cabinet Promo Code LARA #ElectionIntegrity #CyberSecurity #Whistleblower #VotingMachines #LaraLogan
2:48

UNAPPROVED SOFTWARE ON VOTING MACHINES Watch Full Episode Here: On Episode 77 of Going Rogue with Lara Logan, cybersecurity whistleblower Robert Mancini walks Lara through a troubling discovery uncovered through public records and right to know requests. Mancini explains that a third party software, MathNet.Numerics, appeared on a voting system software manifest even though it was not listed in official certification reports from either the state or the Election Assistance Commission. Because voting machines are considered critical infrastructure, they operate on strict whitelisting standards where only approved software is allowed. The presence of unlisted, off the shelf software raises serious questions about oversight and compliance. According to Mancini, searches of EAC records and certification documentation showed no evidence that this software was ever tested or approved despite being present on the machines. Let Dr. Stella Help You Stock Your Medicine Cabinet Promo Code LARA #ElectionIntegrity #CyberSecurity #Whistleblower #VotingMachines #LaraLogan

Lara Logan

29,105 views • 2 months ago

Benedict Evans says AI means more software, not less: "There's going to be a bunch of stuff you could do with software that you just couldn't do before at all. And so there will be more competition." "If you think about the enterprise software fleet today, you've got three buckets... big iron horizontal systems, so SAP and Workday and your CRM... vertical software... and then in the middle, this fuzzy improvised space of Excel and email and the shared file system." "Now you add ChatGPT to that. Do you do that in an LLM? Is there an LLM tool that means you can do that in Salesforce where you couldn't do it before, or you can do it in your vertical app that you couldn't do before?" "All of which is a long way of saying, what does this do to software? And it must be more software. Way more software." Benedict Evans with Erik Torenberg
1:36

Benedict Evans says AI means more software, not less: "There's going to be a bunch of stuff you could do with software that you just couldn't do before at all. And so there will be more competition." "If you think about the enterprise software fleet today, you've got three buckets... big iron horizontal systems, so SAP and Workday and your CRM... vertical software... and then in the middle, this fuzzy improvised space of Excel and email and the shared file system." "Now you add ChatGPT to that. Do you do that in an LLM? Is there an LLM tool that means you can do that in Salesforce where you couldn't do it before, or you can do it in your vertical app that you couldn't do before?" "All of which is a long way of saying, what does this do to software? And it must be more software. Way more software." Benedict Evans with Erik Torenberg

a16z

36,841 views • 1 month ago

Embarking on a new journey into tech, a fresh start in your career? Our Software Engineering Bootcamp is beginner-friendly. Master the art of crafting web products and software solutions in just 23 weeks. Apply Now for February Intake. Online and physical classes are available!
0:54

Embarking on a new journey into tech, a fresh start in your career? Our Software Engineering Bootcamp is beginner-friendly. Master the art of crafting web products and software solutions in just 23 weeks. Apply Now for February Intake. Online and physical classes are available!

Moringa School

5,427,552 views • 2 years ago

Exclusive | Zoo: Text-to-CAD w/ @theJordanNoone AI Revolutionizes Hardware Development Jordan dives into: - Why Zoo started by building a novel geometry engine - How the founding team’s background led to Zoo’s products - The impact of generative AI on hardware design - Zoo’s expansion from software for hardware design, to software for the full hardware development cycle - Why they open sourced their software Full pod, memo, slides from their deck, docs, & more linked in Sourcery below
49:32

Exclusive | Zoo: Text-to-CAD w/ @theJordanNoone AI Revolutionizes Hardware Development Jordan dives into: - Why Zoo started by building a novel geometry engine - How the founding team’s background led to Zoo’s products - The impact of generative AI on hardware design - Zoo’s expansion from software for hardware design, to software for the full hardware development cycle - Why they open sourced their software Full pod, memo, slides from their deck, docs, & more linked in Sourcery below

Molly O’Shea

76,119 views • 2 years ago

An agent-first world is around the corner — where more actions will likely be taken by AI than by humans when building software. Zeno Rocha, cofounder of Resend, and Yoko Li say this reality is shaping how developers build, and changing what user experience really means. Great developer experience alone won’t cut it. We’ll also need to build for agent experience (or AX) — rethinking flows, permissioning, and how we define (and audit) who’s doing what in our systems. Zeno and Yoko share why they believe email is the perfect proving ground for AI agents, how to design APIs for agents (not just humans), and what MCP means for the future of agent-native apps.
0:32

An agent-first world is around the corner — where more actions will likely be taken by AI than by humans when building software. Zeno Rocha, cofounder of Resend, and Yoko Li say this reality is shaping how developers build, and changing what user experience really means. Great developer experience alone won’t cut it. We’ll also need to build for agent experience (or AX) — rethinking flows, permissioning, and how we define (and audit) who’s doing what in our systems. Zeno and Yoko share why they believe email is the perfect proving ground for AI agents, how to design APIs for agents (not just humans), and what MCP means for the future of agent-native apps.

a16z

32,663 views • 1 year ago

Marc Benioff just exposed the biggest hypocrisy in the AI boom. The companies building the AI that’s supposed to kill software are some of Salesforce’s largest customers. Benioff: “The AI companies love our products and they can’t buy enough of them. They’re some of our largest customers now: Anthropic, OpenAI, Google, Amazon, you name it.” Let that land. The most advanced AI labs on earth. The companies with more engineering talent and compute than anyone. The ones building the technology that analysts say will make traditional software obsolete. Still buying traditional software. At scale. Benioff: “No one has a company that’s running entirely on a large language model because it’s not real.” Not because they haven’t tried. Because an LLM is not a foundation. It’s a feature. Benioff: “Yeah, Minority Report, I watched the movie. Great guys, fantastic. But I’m in the present-moment reality right now. We’re living in this world. This is 2026.” The analysts writing reports about fully autonomous AI companies have never had to run one. Benioff is running one of the largest enterprise software companies on earth. The gap between those two perspectives is where billions of dollars are being misallocated. Benioff: “How are we doing our financials, our HR, our customer information? How are we doing all of these aspects of our business?” A neural network that hallucinates cannot execute a financial transaction that has to be right every single time. Cannot secure customer data with zero tolerance for error. Cannot provide the determinism that every real business runs on. Benioff: “We need the determinism, and the programmability, and the security, and the sharing.” AI doesn’t replace those requirements. It sits on top of them. Benioff: “I think the software industry is going to be bigger and broader and do more this year than ever before.” The future isn’t AI replacing software. It’s AI making software exponentially more powerful. The smartest people building the future already know this. They’re the ones still buying the software.
2:27

Marc Benioff just exposed the biggest hypocrisy in the AI boom. The companies building the AI that’s supposed to kill software are some of Salesforce’s largest customers. Benioff: “The AI companies love our products and they can’t buy enough of them. They’re some of our largest customers now: Anthropic, OpenAI, Google, Amazon, you name it.” Let that land. The most advanced AI labs on earth. The companies with more engineering talent and compute than anyone. The ones building the technology that analysts say will make traditional software obsolete. Still buying traditional software. At scale. Benioff: “No one has a company that’s running entirely on a large language model because it’s not real.” Not because they haven’t tried. Because an LLM is not a foundation. It’s a feature. Benioff: “Yeah, Minority Report, I watched the movie. Great guys, fantastic. But I’m in the present-moment reality right now. We’re living in this world. This is 2026.” The analysts writing reports about fully autonomous AI companies have never had to run one. Benioff is running one of the largest enterprise software companies on earth. The gap between those two perspectives is where billions of dollars are being misallocated. Benioff: “How are we doing our financials, our HR, our customer information? How are we doing all of these aspects of our business?” A neural network that hallucinates cannot execute a financial transaction that has to be right every single time. Cannot secure customer data with zero tolerance for error. Cannot provide the determinism that every real business runs on. Benioff: “We need the determinism, and the programmability, and the security, and the sharing.” AI doesn’t replace those requirements. It sits on top of them. Benioff: “I think the software industry is going to be bigger and broader and do more this year than ever before.” The future isn’t AI replacing software. It’s AI making software exponentially more powerful. The smartest people building the future already know this. They’re the ones still buying the software.

Dustin

203,575 views • 4 months ago

Today, we’re introducing Spawnlabs We built it to push the limits of what software can be spawned, from simple tools to complex systems Software has always been a way to extend what we can do and create. and now we're building spawnlabs to automate the ability to spawn software that solves harder problems and builds deeper systems. live now
1:46

Today, we’re introducing Spawnlabs We built it to push the limits of what software can be spawned, from simple tools to complex systems Software has always been a way to extend what we can do and create. and now we're building spawnlabs to automate the ability to spawn software that solves harder problems and builds deeper systems. live now

teddy.

67,448 views • 6 months ago

Vikram Sarabhai Space Centre (VSSC), Indian Space Research Organisation, Thiruvananthapuram, is organising National Finite Element Developers' / FEAST Users’ meet (NAFED08) on February 01, 2025, at IIT Hyderabad. FEAST (Finite Element Analysis for STructures), a general purpose finite element software is completely an indigenous development complying with industry standard practices. To promote the usage of FEAST and enhance its capabilities through collaboration, NAFED is being conducted annually since 2016. The objective of the meet is to bring together domain experts and software developers within the country in the field of finite element and numerical methods. The central focus of the meet will be on the usage of FEAST software for solving complex engineering problems and consolidate usage feedbacks to enhance the software. Developers from academia and start-ups are given an opportunity to showcase their possible collaborative work and interact with FEAST software developers on how to interface their work with FEAST as external modules using python scripting. Events like a competition for design and analysis of structures using FEAST and a Quiz competition for students on finite element analysis are also planned as part of the meet. For further details visit the meet link:
3:07

Vikram Sarabhai Space Centre (VSSC), Indian Space Research Organisation, Thiruvananthapuram, is organising National Finite Element Developers' / FEAST Users’ meet (NAFED08) on February 01, 2025, at IIT Hyderabad. FEAST (Finite Element Analysis for STructures), a general purpose finite element software is completely an indigenous development complying with industry standard practices. To promote the usage of FEAST and enhance its capabilities through collaboration, NAFED is being conducted annually since 2016. The objective of the meet is to bring together domain experts and software developers within the country in the field of finite element and numerical methods. The central focus of the meet will be on the usage of FEAST software for solving complex engineering problems and consolidate usage feedbacks to enhance the software. Developers from academia and start-ups are given an opportunity to showcase their possible collaborative work and interact with FEAST software developers on how to interface their work with FEAST as external modules using python scripting. Events like a competition for design and analysis of structures using FEAST and a Quiz competition for students on finite element analysis are also planned as part of the meet. For further details visit the meet link:

ISRO

74,213 views • 1 year ago

Introducing TRAE SOLO: the first all-in-one Context Engineer, built right into your dev workspace.🤖 SOLO thinks, plans, builds, tests, and ships complete software with deep context and the right tools. From idea to production, you only need one piece of software now.
4:09

Introducing TRAE SOLO: the first all-in-one Context Engineer, built right into your dev workspace.🤖 SOLO thinks, plans, builds, tests, and ships complete software with deep context and the right tools. From idea to production, you only need one piece of software now.

TRAE

549,095 views • 1 year ago

.Amjad Masad : Creating software is going to be one of the most exciting areas. The average person will soon be as capable as what a senior software engineer is today, as we shift from doing the work to directing it. Instead of coding line by line, you’ll run multiple agents in parallel, building the frontend, refactoring the database, shipping features, all in the background. On top of that, you’ll have a clean interface to design and interact with AI more creatively. Software creation is moving from execution to orchestration, and soon, it won’t be a specialised skill, it’ll be the baseline.
0:47

.Amjad Masad : Creating software is going to be one of the most exciting areas. The average person will soon be as capable as what a senior software engineer is today, as we shift from doing the work to directing it. Instead of coding line by line, you’ll run multiple agents in parallel, building the frontend, refactoring the database, shipping features, all in the background. On top of that, you’ll have a clean interface to design and interact with AI more creatively. Software creation is moving from execution to orchestration, and soon, it won’t be a specialised skill, it’ll be the baseline.

Extraordinary

19,241 views • 4 months ago

Former Goldman Sachs executive Raoul Pal explains how AI is going to eat traditional software/SAAS. If your product is just software, agentic AI can reproduce it on demand, optimize it, and redeploy it to a better market. "Agentic AI means it’s like having Fiverr, a website of experts you can ask any question. It’ll go away and do the task.... Agentic AI will build, design the website, code it, register the domain name, figure out the branding, figure out the marketing, figure out the email list, figure out the whole thing. So then you and I are in competition. You’ve built this incredible new website. I just go to my AI and say, “Love Steven’s website. Can you just build it better. Boom. 3 minutes. How can we be entrepreneurs in software? Now there’s this theory going around that AI is going to eat software, and I kind of get it." ---- From 'The Diary Of A CEO and Raoul Pal The Journey Man' YT channel. (link in comment)
1:11

Former Goldman Sachs executive Raoul Pal explains how AI is going to eat traditional software/SAAS. If your product is just software, agentic AI can reproduce it on demand, optimize it, and redeploy it to a better market. "Agentic AI means it’s like having Fiverr, a website of experts you can ask any question. It’ll go away and do the task.... Agentic AI will build, design the website, code it, register the domain name, figure out the branding, figure out the marketing, figure out the email list, figure out the whole thing. So then you and I are in competition. You’ve built this incredible new website. I just go to my AI and say, “Love Steven’s website. Can you just build it better. Boom. 3 minutes. How can we be entrepreneurs in software? Now there’s this theory going around that AI is going to eat software, and I kind of get it." ---- From 'The Diary Of A CEO and Raoul Pal The Journey Man' YT channel. (link in comment)

Rohan Paul

48,418 views • 4 months ago

Former Goldman Sachs executive Raoul Pal explains how AI is going to eat traditional software/SAAS. If your product is just software, agentic AI can reproduce it on demand, optimize it, and redeploy it to a better market. "Agentic AI means it’s like having Fiverr, a website of experts you can ask any question. It’ll go away and do the task.... Agentic AI will build, design the website, code it, register the domain name, figure out the branding, figure out the marketing, figure out the email list, figure out the whole thing. So then you and I are in competition. You’ve built this incredible new website. I just go to my AI and say, “Love Steven’s website. Can you just build it better. Boom. 3 minutes. How can we be entrepreneurs in software? Now there’s this theory going around that AI is going to eat software, and I kind of get it." ---- From 'The Diary Of A CEO and Raoul Pal The Journey Man' YT channel. (link in comment)
1:11

Former Goldman Sachs executive Raoul Pal explains how AI is going to eat traditional software/SAAS. If your product is just software, agentic AI can reproduce it on demand, optimize it, and redeploy it to a better market. "Agentic AI means it’s like having Fiverr, a website of experts you can ask any question. It’ll go away and do the task.... Agentic AI will build, design the website, code it, register the domain name, figure out the branding, figure out the marketing, figure out the email list, figure out the whole thing. So then you and I are in competition. You’ve built this incredible new website. I just go to my AI and say, “Love Steven’s website. Can you just build it better. Boom. 3 minutes. How can we be entrepreneurs in software? Now there’s this theory going around that AI is going to eat software, and I kind of get it." ---- From 'The Diary Of A CEO and Raoul Pal The Journey Man' YT channel. (link in comment)

Rohan Paul

17,215 views • 24 days ago

Some personal hot takes from AI: engineer Miami follows... 1. Software development is a dead-end profession because anyone can be a software developer now. 2. Anyone can use Cursor or any other tool and generate code. Being a coder and being a software engineer are different. 3. Computers used to be gated; now everyone has the power to make computers malleable. Everyone is a software developer now, but that does not mean they are software engineers 4. If you cannot demonstrate how a coding agent works, you are just a consumer and have imposed an artificial glass ceiling on your career as a software engineer. 5. If you are curious, you will have a job. If you have not been curious in the last two years, you are replaceable. 6. SaaS per-seat economics may become unstable as customers need fewer people to achieve results, prompting founders to think about new unit economics 7. Most companies will take two or three years (or more!) to figure out AI transformation. 8. Some companies are already building AI native teams of five to ten people who can build with the grain of AI 9. There will be an explosion in the number of software developers. Software development is now essentially free, and tokens are cheaper than humans 10. Not enough engineers know what it means to be a product engineer 11. JIRA ticket monkeys are cooked 12. If your company has banned AI, you should quit that company 13. AI is more like a musical instrument than just a tool play with it, make discoveries, build intuition learn where AI is good and where it fails
14:55

Some personal hot takes from AI: engineer Miami follows... 1. Software development is a dead-end profession because anyone can be a software developer now. 2. Anyone can use Cursor or any other tool and generate code. Being a coder and being a software engineer are different. 3. Computers used to be gated; now everyone has the power to make computers malleable. Everyone is a software developer now, but that does not mean they are software engineers 4. If you cannot demonstrate how a coding agent works, you are just a consumer and have imposed an artificial glass ceiling on your career as a software engineer. 5. If you are curious, you will have a job. If you have not been curious in the last two years, you are replaceable. 6. SaaS per-seat economics may become unstable as customers need fewer people to achieve results, prompting founders to think about new unit economics 7. Most companies will take two or three years (or more!) to figure out AI transformation. 8. Some companies are already building AI native teams of five to ten people who can build with the grain of AI 9. There will be an explosion in the number of software developers. Software development is now essentially free, and tokens are cheaper than humans 10. Not enough engineers know what it means to be a product engineer 11. JIRA ticket monkeys are cooked 12. If your company has banned AI, you should quit that company 13. AI is more like a musical instrument than just a tool play with it, make discoveries, build intuition learn where AI is good and where it fails

geoff

55,887 views • 23 days ago