Everything You Should Know Before Mythos Arrives | Nebulock, Damien Lewke

EOJune 29, 202614m

Topics13

Mythos and the Shifting Balance of Power in Cybersecurity0:00 About Damien Lewke and Nebulock0:31 Personal Discipline and Career Path2:00 The Two-Sided Problem That Led to Nebulock2:30 AI's Impact on the Power Distribution in Security3:30 Expanding Threat Actor Landscape5:00 Founder Mindset and Problem Obsession6:00 Modern Attack Techniques and Lateral Movement7:00 The Cyber Kill Chain and AI Automation8:30 The Defender Gap and Origins of Nebulock10:00 Threat Hunting vs. Alert-Based Detection11:00 Nebulock's Purpose and the Reality of Democratized Attacks12:30 Personal Support and Founder Authenticity14:00

In a Nutshell

Damien Lewke argues that Mythos and similar AI tools have collapsed the talent gap in cyber attacks, letting just two people with a GPU automate reconnaissance, targeting, and exploitation against any organization. The result is a massive expansion of threat actors beyond nation-states and elite groups to everyday hackers who can now blend into normal activity and move laterally undetected. Nebulock was founded to close the defender gap by providing contextual, cross-tool threat hunting that spots these hidden sequences before they become breaches.

AI-Generated Notes

These notes were generated by AI and may contain inaccuracies.

Mythos changes the balance of power in cyber. Two people in a GPU who with enough conviction can target a company. Mythos is not existentially scary. Mythos is what security professionals have been saying for years. The real question is what comes after Mythos and whether organizations are ready for it. There is a unique window of time where defenders understand what is coming and have the ability to adapt technology. The critical question is whether defenders can adjust as quickly as the attackers can.

Damien Lewke is the founder and CEO of Nebulock. Nebulock is a contextual security platform that looks at all existing security tools and finds potential threats hidden between the layers. The company raised a $25 million Series A led by First Mark with participation from Bain Capital Ventures, Decibels, Zetta Venture Partners, and Step Function.

Damien discovered his passion on his first day as an intern at Northrop Grumman. He started his career in the DoD building out cyber ops and threat hunting teams before joining CrowdStrike after the Series C and staying through and after the IPO. His first job in the DoD involved working full-time while attending grad school at night to earn a master's in aerospace systems engineering. That experience taught him that showing up and doing your best day in and day out is more important than being a hero every single day.

Damien runs a thousand miles a year. The discipline is about showing up and doing your best at 10:30 in the morning on a Tuesday in February the same way you would on a Friday morning when everything is going great. He gained experience in network security at Palo Alto Networks and in managed detection and response, running the AI detection security research product teams at Arctic Wolf. He also spent time at MIT writing a graduate dissertation at the Computer Science and AI Lab.

Two problems led Damien to start Nebulock. First, as an operator he saw that customers at Arctic Wolf and the 1,200-person security operations center had already invested in best-of-breed tools yet were still getting compromised. Different point solutions to specific problems were not solving how breaches occur. The approach required rethinking everything from first principles.

Two years ago, his thesis was that adversaries would use AI to automate tailored access operations. They would automate the entire lifecycle of targeting an enterprise, compromising it, achieving their objective, and slipping out undetected. Those two problems led to the creation of Nebulock: democratizing the most high-leverage activity in security to all organizations regardless of size, skill set, or budget in a way that is flexible and integrates with existing systems.

Sign in to read the full notes

Get access to AI-generated notes, topic timestamps, and more.

Everything You Should Know Before Mythos Arrives | Nebulock, Damien Lewke

Mythos and the Shifting Balance of Power in Cybersecurity00:00

About Damien Lewke and Nebulock00:31

Personal Discipline and Career Path02:00

Sign in to read the full notes