Ep 141: AI Hackers Are Here; Cybersecurity Legend Kevin Mandia Is Building the Answer

24 snips

Feb 4, 2026

Kevin Mandia, cybersecurity leader who founded Mandiant and now builds AI-driven defense at Armadin. He recounts early nation-state intrusions and the rise of organized cybercrime. He explains why AI agents are changing offense, how defenders must weaponize AI, and the urgent need to test and harden critical infrastructure.

Ask episode

AI Snips

Chapters

Transcript

Episode notes

ANECDOTE

Early Pentagon Frontline Experience

Kevin Mandia started in computer security at the Pentagon in 1993 and responded to his first intrusions by 1995. He traced daily nation-state activity from Russia and China and learned the domain through hands-on breach response.

ADVICE

Don't Trust Antivirus As Your Main Defense

Do not rely on traditional antivirus as your primary defense because it is easy to bypass. Instead, own the front line: respond to breaches and build detection informed by real attacker tradecraft.

ANECDOTE

SolarWinds Wake-Up Call

In 2020 FireEye was compromised via the SolarWinds Trojan and Mandia personally called customers to disclose the intrusion. The breach illustrated that even top companies lose when nation-states target them relentlessly.

Get the Snipd Podcast app to discover more snips from this episode

Get the app

When Kevin Mandia’s phone rings, it’s often a Fortune 500 CEO or government leader with a billion-dollar problem. How did he become the go-to expert in cybersecurity? What new threats from AI led him back into the arena? And what is he building to protect the good guys?

Kevin began his career in the U.S. Air Force, defending the U.S. military from some of the earliest cyber attacks. He went on to found and lead Mandiant, scaling it into an industry leader which Google acquired in 2022 for over $5 billion. In 2013, he famously exposed China’s massive state-sponsored cyber espionage inside America. Kevin has also served on the National Security Telecommunications Advisory Committee (NSTAC) and the CISA Cybersecurity Advisory Committee. He recently launched Armadin to address new AI possibilities in the cyber domain.

To begin, Kevin takes us behind the scenes of the early cyber skirmishes in the 1990s, and what it was like confronting some of the first cyber incursions from Russia and China, as well as the rise of criminal cyber enterprises. In the early 2000s, Kevin noticed glaring gaps in conventional antivirus approaches and launched Mandiant. Learn how he quickly became the first person that CEOs and governments would call if they’d been hacked. After scaling Mandiant and exiting to Google, Kevin is now back in the arena building cutting-edge solutions to new AI cyber threats. He explains the dramatic increase in the productivity and sophistication of AI agents, and why it’s upending how we build cyber defenses. Find out what he’s most worried about in 2026, and what steps governments and CEOs need to take to secure their networks and infrastructure.

0:00 Episode intro

01:30 Kevin's journey into cyber; early attacks from Russia & China

05:00 The evolution of cyber espionage and crime

08:00 Founding Mandiant; why Fortune 500 CEOs call Kevin

13:30 What's it like getting hacked by Russia?

21:30 AI hackers are here; Kevin's warning

27:00 Protecting critical infrastructure; harnessing AI for cyber defense

31:30 Engineers vs AI agents

36:40 Optimism for the future

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit blog.joelonsdale.com