# Depue says AI lab velocity races undermine security against nation-state adversaries

> Original title: i'd like to say i don't think the responsibility for this lies too heavily on the CISOs/sec teams at OAI and Ant: i'm sure they'd lock ev...

- Source: will depue
- Published: 2026-10-28T00:30:29.000Z
- Bad Influence: https://badinfluence.news/items/kxrdcnbqn4ucm5ps7qgguf8z1
- Original: https://x.com/willdepue/status/2115239748294037857

## Summary

Will Depue, an OpenAI-linked researcher, argues that CISOs at OpenAI and Anthropic cannot lock down security because leadership prioritizes speed over security in their competition. He says the sprint leaves the results of billions in R&D exposed to national adversaries, calling "security by velocity" workable only for market share, not for the balance of world power. He cites a reported Slack admin-access breach at Anthropic, which he says is underplayed.

## Post

i'd like to say i don't think the responsibility for this lies too heavily on the CISOs/sec teams at OAI and Ant: i'm sure they'd lock everything down if they could

instead, the leaders of these companies, in such tense competition with each other, can't sacrifice velocity for security. it is more important to them to move fast than to be secure, even from our greatest national adversaries

another grand consequence of the private AGI race. the results of a trillion dollars of research & development spend being served for free to every nation with a semi-competent security agency, plans for the most powerful technology ever invented

'security by velocity'. 'just move fast, let the secrets spill behind you', is only a strategy that works when you're competing for consumer & corporate market share, not the balance of the world

## Quoted post @willdepue

> anthropic is massively underplaying the recent security breach. i'm hearing cathedral achieved full administrator access of the slack workspace (see every message, log in as arbitrary users) where literally every single research secret is contained
> 
> to those unfamiliar: Ant & OAI keep literally everything in Slack. it sounds exactly the same incident that happened to OpenAI in 2023, where OpenAI was hacked by a random guy who got access to an access token from an external app service
> 
> "we're critical to national security, we must beat China, and yes we keep all our crown jewels in Salesforce's Slack messenger. yes we have admin API tokens everywhere. why do you ask?"

https://x.com/willdepue/status/2115236836092313988