Pinned Tweet
🧵 #RSAC got me 🤔. Every major tech platform shift mints new security winners
Network → Cisco. Endpoint → CrowdStrike. Identity → Okta. Cloud → Wiz ($32B exit).
We are now at the start of the next two waves and most organizations aren’t ready.
Here’s what’s coming:
Just talked with Sean Adler on The Blue Swan Podcast about AI’s new threat landscape, why I watch the dark web closely, and how cybersecurity founders need investors who move as fast as attackers do.
🎧 seantzu.substack.com/p/taha-…
Going to Black Hat USA 2026 to do normal investor things like take notes in briefings and definitely not get destroyed by the casino floor at 1am with a room full of pentesters.
If you’re building something real in security — AI-native or not — I want to hear about it. DM me.
#BlackHat2026 #Cybersecurity #AI
Everyone is focused on AI writing malware.
JADEPUFFER is a much bigger shift. It reportedly used an AI agent to carry out an entire ransomware attack: initial access and recon to credential theft, lateral movement, and encryption.
That’s a different level of automation.
Taha Mubashir | Cyber x AI Investor retweeted
Seeing so many folks with 20,000+ commits/year has me wondering ...
How do you land code?
33%commit to main
32%open a PR then merge
35%open a PR then squash
596 votes • Final resultsWe’ve been talking about software supply chain risk since SolarWinds. SBOMs, ASPM, secure-by-design. 5 years of frameworks
This week three simultaneous attacks hit security vendors, AI toolchains, and package repos
The category graduated from “important” to “urgent.” There’s a difference
Security is shifting from protecting people and devices to governing identities, machines, and autonomous systems operating at a scale humans can no longer manage manually.
Startups are building identity for AI agents. They are faster and more nimble.
Okta just walked in with distribution. See their latest announcement
Can a legacy IdP win the agentic identity category?
Most cybersecurity startups don’t fail on tech.
They fail on:
– chasing hype before demand (AI might be an exception)
– overfitting to a few CISOs
– thinking product alone wins
– raising too much, too early. $100M seed rounds aren’t normal
Focus is the real moat
Taha Mubashir | Cyber x AI Investor retweeted
Introducing termDRAW!
It's a terminal-native illustrator for making agent-friendly ASCII + unicode diagrams.
Prompt more design intent than w/ words, use fewer tokens than screenshots. Works over SSH.
Use it on the CLI or as a Pi extension
Gartner can define categories.
But categories don’t create billion dollar companies.
Urgent problems do.
Most “new” categories are just renamed old ones.
The real signal is where CISOs are actually consolidating spend.
Lovable’s issue wasn’t a new bug class. It was an old one: broken object-level authorization.
AppSec now has to evolve for the speed and world of vibe coding: less inspecting code after it’s generated, more constraining what the generator can ship.
1/5
Have you ever wondered what actually happens when you transfer money between banks?
It is not what you think. A thread 🧵
4/5
The file format banks use is called NACHA. Legacy fixed-width ASCII where each record is exactly 94 characters, with fields sitting at specific positions within each record.
The format is old and durable. It works, and the switching costs are enormous.
Bring back hand written memos! Brb purchasing a 🖊️
In honor of 50 years of Apple, we're sharing - for the first time ever - Don Valentine's original 1977 memo for Sequoia's investment into Apple Computer. #Apple50
@Alex_Garneauu I have some amazing folks on my team that write memos - better than I could ever. I guess they need to be careful :p