The Spiro Circle

James Spiro

Join me as I discuss issues relating to Israel, tech, media, and news. Sometimes with a guest, sometimes solo. www.thespirocircle.com

  1. −1 d

    The Clock Is Ticking on Encryption - #0077, Itamar Sivan

    I’ll be honest: I entered into this most recent conversation for The Spiro Circle knowing almost nothing about quantum computing. I said as much to my guest, Itamar Sivan, co-founder and CEO of Quantum Machines, before we even started recording. That’s alright - most people don’t really understand it, he told me. Even scientists used to laugh at the idea that quantum computing would ever be commercially viable. But then, about halfway through our conversation, he said something that piqued my curiosity and made me put down my notes. The threat isn’t that quantum computers will simply ‘make things faster’. It’s that they’ll make things possible that are currently impossible. And one of those things is breaking the encryption that protects everything - and keeping cryptographers up at night. He cited potential examples as banks, messages, the NSA, and Bitcoin. “Quantum computers are not interesting because they’re going to take problems we solve today and solve them faster,” Sivan told me. “But rather they will take problems today we deem as impossible and make them possible.” The mechanism is an algorithm called Shor’s algorithm, which can factorize enormous numbers at speeds no classical computer could approach. Modern encryption is built on the assumption that factorizing very large numbers is effectively unsolvable. But by taking away that assumption, the entire architecture collapses. “Something that would take a hundred thousand years might be solvable at the scale of minutes,” he told me. Quantum Machines (QM) is a Tel Aviv-based company that has raised $280 million to build the orchestration layer running quantum processors. Founded in 2018, customers include academia, national labs, and the private sector. What struck me was that he raised this before it exploded as a mainstream story. At the time of our recording, he flagged that a newly published paper suggested quantum computers would need far fewer qubits to break encryption than previously thought. “We’re still digesting it. If they’re right, we’re going to see some big changes in the world in a few years.” And almost as an aside: “One of the claims is that it will be able to break the underlying encryption used for Bitcoin. Just that itself could be a big impact.” Research published between May 2025 and March 2026 shows that breaking widely used cryptographic systems may require far fewer quantum bits than previously thought. Estimates dropped from around 20 million physical qubits in 2019 to under one million by 2025. Papers from Caltech and Google in early 2026 prompted one Bitcoin security researcher to estimate a 10% chance that a quantum computer recovers a Bitcoin private key from an exposed public key by 2032. In April 2026, a researcher successfully broke a 15-bit elliptic curve cryptography key using publicly accessible quantum hardware — a 512-fold improvement over the previous public demonstration just months earlier. Google has already set a 2029 deadline to migrate its own authentication services to post-quantum cryptography. The so-called “harvest now, decrypt later” threat (adversaries collecting encrypted data today, waiting for quantum capability to mature before cracking it) means the clock is ticking, even though many still believe their things will be protected for many more years. Sivan’s broader point, the one I kept coming back to, is that quantum won’t replace the computing infrastructure we’ve built - but instead plug into it. It means the vulnerabilities we’ve built into that infrastructure travel with us. “Not a question of if,” he told me as we finished. “A question of when.” I didn’t know much about quantum computing before this conversation. But I think I know enough now to think that answer should concern all of us! Watch a 5-minute preview of our conversation on this topic, here: Get full access to The Spiro Circle at www.thespirocircle.com/subscribe

    46 min
  2. The Future of Cybersecurity May Look Like Swarms of AI Hackers - #0076, Shahar Peled

    20 maj

    The Future of Cybersecurity May Look Like Swarms of AI Hackers - #0076, Shahar Peled

    Imagine the scene: A developer at a large financial institution merged a routine code update. Nothing alarming yet, just a minor change that, on its own, meant little. But Terra Security’s AI agents were watching. AI agents flagged the change, verified a potential vulnerability, and then did something a human penetration tester probably wouldn’t have done. They kept looking. Eventually, they found two more vulnerabilities nearby, each individually insignificant. But they spotted a pattern and connected all three together. “1+1+1 = 1,000,” said Shahar Peled, co-founder and CEO of Terra Security. The result was a Remote Code Execution (RCE), a cybersecurity vulnerability that allows an attacker to run malicious code on a target system or server from a remote location. It is considered one of the most critical vulnerability classifications of its type. The customer found out from their vendor, not from an adversary. Founded in 2024, the Tel Aviv and New York-based startup has raised $38 million across a rapid Seed and Series A, and counts Fortune 100 enterprises among its customers. Its core product is an agentic offensive security platform where swarms of AI agents are trained to think and act like “ethical hackers”, running continuously across a company’s attack surface. The traditional model of penetration testing (hiring an external team once or twice a year to probe for weaknesses) was never designed to catch what Terra caught in that unnamed financial institution. “Until 2025, it happened on an annual basis mostly,” Peled explained. “Once a year, you hire someone externally to work for a week or two weeks... The reason you couldn’t do it continuously is that you couldn’t really train software to hard-code how adversaries think and act.” But AI has changed all that. Terra Security’s agents scan for known vulnerabilities and simulate the reasoning of an attacker, chaining together findings and verifying whether a vulnerability is actually exploitable rather than merely theoretical. But Peled is careful not to overclaim, and beat me to my own next question. “Are AI agents today better than any ethical hacker in the world? They’re not,” he said. “They don’t yet possess the creativity of the best ethical hackers. But they can be more scalable than anyone in the world. They can run continuously. They never sleep. They’re already better than the vast majority of ethical hackers in the world.” With AI, there are no longer cyberattackers who wait for annual review windows. Adversaries now use tech to find entry points faster, adapt in real time, and strike before defenders can patch. A point-in-time test is, by definition, already outdated the moment it concludes. Terra’s idea is that continuous, AI-driven offensive security is the only architecture that matches the pace of modern attacks. The chained vulnerability Peled mentioned in our conversation was only catchable because an agent was watching the moment the code changed - and not six months later, when a consultant finally showed up. “I still see too many organizations that say, ‘Okay, now we have AI in offensive security’,” he concluded, and as a slight warning to CISOs still budgeting for annual pen tests. “[They say] ‘I want to do the same thing I’ve done before, just faster, better, cheaper’. And that scares me.” Get full access to The Spiro Circle at www.thespirocircle.com/subscribe

    45 min
  3. Employees Are Leaking Corporate Secrets Through ChatGPT - #0075, Itamar Golan

    15 maj

    Employees Are Leaking Corporate Secrets Through ChatGPT - #0075, Itamar Golan

    There’s a new security risk out there, and it’s come to be known as The Shadow AI Problem. It suggests that the next major corporate data breach may not come from a sophisticated nation-state actor or a phishing campaign, but rather from an employee asking an AI chatbot to read or summarize sensitive company data. That’s the reality Itamar Golan has spent the last two years building a company around. As co-founder and CEO of Prompt Security (acquired by SentinelOne earlier this year for $250 million), he has become one of the voices warning of the gap between how fast enterprises are adopting AI and how little they understand about where their data is going. According to him, most CISOs focus on traditional attack vectors, but the real risk is employees pasting IP addresses into unauthorized tools. Prompt Security’s platform now detects nearly 20,000 distinct AI applications operating across enterprise environments. Golan clarified that the figure isn’t plugins or product variants, but 20,000 separate entities. “Today, essentially almost any SaaS application, website, native application running on your endpoint… we are converging towards a landscape where any one of those will be an AI application by itself,” he told me. The Spiro Circle is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. The visibility problem is one thing, but the training problem is another. Prompt Security’s research found that roughly 40% of AI applications, when surveyed at the configuration level, are set by default to train on the data they receive. “Not only has confidential data leaked out of your organization,” Golan explained, “it’s now potentially becoming part of the model’s brain.” Details like corporate strategy, personnel data, or legal documents will be available for everyone to see - and there is no obvious retrieval mechanism once embedded in a model’s training run. The sectors most exposed are also the typically traditional ones that are now moving fastest to catch up: Financial services, insurance, and legal firms are adopting AI precisely because it performs exceptionally well on their core workflows. “They find themselves in this very tricky situation,” he told me. “On the one hand, they are adopting AI the fastest, and the potential gain is immense, but the risk of making a mistake is so big as well.” It is a distinctly Israeli problem to be working on. Golan mentioned that when he surveyed the security stacks of Fortune 500 CISOs while building Prompt, he found that around 60% of the tools on their lists were built by Israeli companies. Startup Nation has given the world Check Point, CyberArk (acquired by Palo Alto Networks), and Wiz (acquired by Google). Now, Prompt Security, as part of SentinelOne, is trying to secure the AI layer that sits above all of them. “We cannot stay blind,” Golan concluded. “We must admit that our employees are using hundreds or thousands of AI applications. A big portion of those are able to train on the data we are sharing with them.” Acknowledging that reality, he argues, is the first step to acting on it. Get full access to The Spiro Circle at www.thespirocircle.com/subscribe

    51 min
  4. Israel's FoodTech Story Was Never About Fake Meat - #0074, Ilanit Kabessa Cohen

    12 maj

    Israel's FoodTech Story Was Never About Fake Meat - #0074, Ilanit Kabessa Cohen

    This isn’t the first time I’ve covered Israel’s foodtech sector. Back in 2022, reporting for CTech, I mapped the ecosystem at a moment of tension, when investment was holding up better than in any other tech vertical, but the skeptics remained. I was, and still am, bullish on Foodtech - at least at the start. I tasted 3D-printed burgers in Tel Aviv and called them “technically perfect, albeit creatively void.” I interviewed investors who compared the industry to early mobile phones — primitive first iterations, but with everything still to come. I wanted to delay a full embrace of alternative foods until the markets all caught up. Turns out many felt the same way. So years later, I wanted to revisit all of that with someone who’s lived it from the inside. Ilanit Kabessa Cohen has spent 25 years asking one question: what does it actually take to bring innovation to market? As the first Head of Innovation at Osem-Nestlé, a corporate venturing lead at Dole in Singapore, and now co-founder of the advisory firm URIKA, she’s seen the food ecosystem from virtually every angle — and she joins me to share what she’s learned. Our conversation opens with an assessment of Israel’s position in global foodtech. Despite being a relatively small player in terms of total funding (roughly $16 billion globally), Israel punches well above its weight: driven by its kosher culinary traditions, research institutions, a culture of cross-domain improvisation, and the Israel Innovation Authority’s risk-sharing model that few other governments have replicated. But Ilanit is candid about where the industry fell short. The first generation of alternative proteins disappointed consumers, investors, and believers alike. Not because the vision was wrong, but because first-generation products rarely win. She argues we’re now entering a correction phase, with more mature companies, better-tasting products, and a smarter understanding that the real action right now is B2B ingredients, not consumer-facing brands. The most forward-looking part of the episode covers what she calls “animal-free technologies” — a next-generation wave that goes far beyond food. Think collagen produced via precision fermentation for use in cosmetics, pharma, and nutrition. Or how biomaterials could replace shark liver extract or horseshoe crab blood in medical testing. She said how the next decade of opportunity lies in the convergence of food, health, and biotech - and finally, she discussed two opportunities: the Coller Startup Competition (now open, with a $100K prize) and URIKA’s Generate partnership program with CSM Ingredients for startups in sugar reduction and proteins. The Spiro Circle is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. Get full access to The Spiro Circle at www.thespirocircle.com/subscribe

    51 min
  5. 7 maj

    Why Israeli Marketers Beat Americans at Their Own Game - #0073, Aviv Canaani

    Datarails CRO Aviv Canaani has an unusual vantage point. He runs the full revenue engine of the financial planning and analysis platform for Microsoft Excel users — sales, marketing, partnerships — from New Jersey, while his marketing team operates out of Israel. He relocated to be closer to the North American customer base as the marketers stayed put. And after years of sitting inside both ecosystems at the same time, attending CMO sessions in Tel Aviv and building pipelines in the US, he’s reached a verdict most people in his position wouldn’t say out loud: the Israelis are better. It’s a claim that cuts against the instinct of almost every Israeli founder he’s encountered - and every company I’ve spoken to over the years. “Normally, when I speak to startups that are born in Israel, they want to send their sales and marketing overseas immediately. [It’s] the first thing they want to do,” I told him during our conversation. But Canaani’s experience runs the other direction. The Israeli edge, he claims, comes down to a cultural obsession with output. “When you talk with people in Israel, marketing leaders, it’s about how they built machines, how much the cost per meeting, how they’re running campaigns on Facebook and Google and all that.” American counterparts, he finds, often arrive at the conversation from somewhere else entirely. “A lot of CMOs and people in marketing I talk with in the US or Canada… can talk more about the brand, how things take time, like it’s a long-term investment.” “Tachlas mentality” explained He traces this back to something structural in Israel’s tech DNA: The concentration of adtech companies and the performance-marketing culture they seeded, and also what he calls “tachlas mentality”. He explained that this requires teams to be focused on results above everything else. The blend of that mindset with an unusually international talent pool (many ‘Olim’ from Britain, the US, or Europe) produces something Canaani finds hard to replicate in America. But there’s a catch - and one worth remembering. The same intensity that makes Israeli marketing so effective in the early stages carries a structural weakness as companies grow. “In North America, things are much more organized. It’s clearer how they create the messaging and the product marketing and how to make sure there is alignment between marketing and sales,” he told me. Israel, by contrast, tends to run so fast that alignment becomes a casualty. “It seems like sometimes it doesn’t even matter if marketing speaks one language and sales speaks another. Let’s just run fast. It’s speed above everything else.” The American advantage, then, is less about raw marketing talent and more about institutional discipline. “In North America, maybe it’s hard in the startup phase, but once they’re a bigger company, they have better processes — how to run things, how to stay on point.” So what Canaani is describing is a stage-mapping problem. Israeli performance marketing is almost perfectly calibrated for the zero-to-one phase: find the signal, iterate fast, fill the pipeline before the runway ends. But American marketing discipline becomes the dominant advantage once you’re scaling and when the team is distributed. Move fast and break things, but then slowly mold them into greatness. The companies that figure out how to sequence both are the ones most likely to build something that lasts. Datarails, with teams operating on both sides and a CRO who has lived inside both cultures simultaneously, is running that experiment right now. [5-minute preview: Why Israeli Startups Are Better at Marketing Than They Think] Get full access to The Spiro Circle at www.thespirocircle.com/subscribe

    42 min
  6. The Middle Eastern Map No US President Can Escape - #0072, Gidi Grinstein

    3 maj

    The Middle Eastern Map No US President Can Escape - #0072, Gidi Grinstein

    Every few years, a new American administration arrives in the Middle East convinced it can start fresh. Trump’s team was no different. They came to the problem with a clean slate and nothing but the confidence of a New York real estate mogul. They produced two documents across both his terms: the January 2020 plan and the October 2025 twenty-point Gaza framework. The result, according to my guest Gidi Grinstein, was that they landed exactly where everyone always lands. “Even Trump ends up landing very close to where Nixon landed, to where Carter landed, to where Clinton landed,” he told me. “Because there is a gravitational force that is shaping these negotiations.” Gidi Grinstein has seen the Middle East from angles most people never will. At 29, he was the secretary of Israel's negotiating delegation at Camp David and the youngest person at the 2000 Summit. He spent years inside the machinery of the peace process drafting texts, aligning teams, and managing the distance between what leaders said in public and what they were willing to accept in private. Today, he runs Tikkun Olam Makers (TOM), a global initiative using open-source 3D printing to bring affordable prosthetics to people who can't access or afford conventional ones. While we intended to speak mostly about TOM, our conversation stayed on peacebuilding, negotiation, and his view of politics today. The force, he said, traces back to “the most brilliant and American diplomat of the last hundred years”, Henry Kissinger, and the architecture he designed in the 1970s. It was a framework built not around Israeli or Palestinian interests, but around American hegemony in the Middle East. Half a century later, and it is proving so durable for Washington that no administration, however disruptive, can break from it. The 2020 Trump plan's "two nation states for two people" echoes UN Resolution 181 from 1947. The 2025 Gaza framework in places reads like a revamped version of the Oslo Declaration of Principles from 1993. “You would be stunned by the amount of similarities,” he told me. What’s interesting this time around is that both countries - Israel and the US - face impending elections mere days apart, promising to shake up not just the political makeup for both sides, but potentially the leadership of one. This creates what Grinstein calls the clock problem: Israeli and American leaders, under electoral pressure, always want a deal now. Their counterparts (Arafat then, the Iranians today) operate on an entirely different political timeline, with every incentive to wait out a weakened or transitional government. “The synchronization of the political clocks is very important in getting the deal,” he said. Trump, he suggests, may be walking into the same trap by pushing hard before November while Tehran calculates what comes after. The gravity doesn’t guarantee peace, but I realized it means the frameworks are always roughly the same so long as the Americans are involved. And so far, history is showing us that they always find their way back to them. You can catch the entire conversation above. And expect more analysis from our conversation in future newsletters. [5-minute preview: Watch Gidi explain this in a YouTube clip, “Trump Thinks He's Rewriting Middle Eastern History. He's Repeating It.”] The Spiro Circle is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. Get full access to The Spiro Circle at www.thespirocircle.com/subscribe

    45 min
  7. The Operating System Of War Is Up For Grabs - #0071, Udi Oster

    30 apr.

    The Operating System Of War Is Up For Grabs - #0071, Udi Oster

    As conflict dynamics shift across the Middle East, from disrupted shipping lanes to drone warfare, a new question is emerging: who controls the software behind autonomous systems? Military power used to depend on access to advanced weapons systems, often built through international supply chains and dominated by a handful of large contractors. Today, conflicts in Ukraine and Iran, and tensions with China, are highlighting bottlenecks on critical technologies and the instability of disrupted supply chains. One Israeli company may have an answer to this new challenge. Udi Oster is the co-founder of eyesAtop, a startup building AI-native universal controllers for drone fleets. The company has spent the last three years making a case that the strategic asset in modern warfare isn’t any particular drone, but it should be the operating system above them. “Locking in to one vendor with one platform is something that in today’s world is very difficult,” Oster told me. “You want to have the flexibility to get the best technology at the point of time of interest and use it immediately.” Militaries around the world are accumulating drones from dozens of manufacturers, but without a common interface, any shared AI layer, or no easy way to retrain operators when hardware changes. EyesAtop’s platform intends to integrate into any drone, from any vendor, under one controller trained on over 500,000 hours of live IDF operational data. The Spiro Circle is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. The geopolitical context of conflicts and wars has expanded this market. Global defensetech VC hit a record $49.1 billion in 2025, nearly double the prior year, driven largely by autonomy and AI. American firms like Anduril have already moved into Taiwan, South Korea, Japan, and Singapore, selling hardware to nations trying to face off against the Chinese military. eyesAtop is pursuing a different layer of the stack: not competing on the drone itself, but selling the so-called brain that integrates whatever drones those nations already operate or plan to buy. Oster draws a sharp distinction between the American market and everyone else. America is its own category: It accounts for more than half of global defense spending, it has its own procurement logic, and its own concept of operations. EyesAtop already has a U.S. co-founder, a U.S. base, and existing deals with American military commands. For the rest of the world, the company offers a full-kit solution, where it selects the best available platforms globally, integrates them under its universal controller, and delivers a turnkey reconnaissance or strike capability to militaries that lack the R&D infrastructure to build it themselves. “Most of the countries outside of the U.S. lack the infrastructure and the R&D budgets even to get to the same type of level as Israel and the U.S.,” Oster said. “I would look at these countries differently.” The fundraising backstory underscores how fast the landscape has shifted. Three years ago, Oster says, virtually no Israeli VC would touch defense. The stigma was visible and impacted reputational and commercial opportunities. But the world changed after October 7, 2023, and today, funds are competing for allocations in a sector that now ranks among the top three investment themes globally. The longer-term vision Oster sketches is more ambitious than any single product cycle. As robotic systems multiply on the battlefield, army headcount becomes less relevant than software sophistication. Today, wars can be fought by one operator controlling multiple autonomous platforms that were trained in actual combat. “Instead of having a whole company,” he says, “you have two people, but they would operate a company of robotic systems.” He calls it "the ghost squad." For the allies now looking to build drone sovereignty in the middle of an active regional war, it may also be the next software contract they don't know they need. And that balance of power is moving up the stack. [3-minute preview: Optimism in Defensetech and the future of deterrence] Get full access to The Spiro Circle at www.thespirocircle.com/subscribe

    42 min
  8. Telling Israel’s Story When It’s Hardest to Hear - #0070, Alona Stein

    27 apr.

    Telling Israel’s Story When It’s Hardest to Hear - #0070, Alona Stein

    I know better than anyone that there’s a version of Startup Nation that the world is perfectly happy to celebrate. The record exits, the Wiz acquisition - $15.6 billion raised in 2025, with exits totalling $74 billion. Those stories write themselves. I know that because I spent five years doing it, too. But the other story, the one about what it actually takes to keep a company’s messaging intact in wartime, is harder to tell, and rarer to find someone willing to tell it honestly. So I spoke to Alona Stein, co-CEO of ReBlonde, one of Tel Aviv’s more influential tech PR agencies. She has spent 13 years managing the gap between what Israeli founders want the world to know and what the world is prepared to hear. Since October 7, 2023, that gap has never been wider. “There’s an axis,” she told me, “between showing resilience and chasing ambulances.” It sure sounds like a line from a crisis comms handbook, but the way she says it, it’s more like a warning. The question of how to position an Israeli company is becoming existential. Do you lean into the Israeli identity, or quietly let the Delaware incorporation do the talking? In my journalism days, I lost count of the number of founders who told me: "Don’t write that we’re Israeli - we’re a ‘Delaware’ company. During recent recordings of this podcast, we had a standing protocol for missile alerts. I would ask my guests if they wanted their run to the shelter included in the final episode in the event we were interrupted. The split was about 50/50: Half wanted to show Israeli pride, and the other half didn’t want to spook overseas investors or customers. Alona knows that conversation well. “Do we move forward with the fact that we’re Israeli-based and Israeli-formed? Do we just talk about that headquarters somewhere else? It really depends on the kind of personality they have as a founder, but also the kind of business that they run and the kind of clients they sell to,” she told me. One example that came up, as it often does, is Wiz. The company went out to the world openly Israeli, and it never hurt them. But Wiz is Wiz. For companies with global client bases in sensitive markets, the calculation is different. She describes one client (a German company returning after several previous engagements) who pulled out at the last minute when their CFO discovered the agency was Israeli. “Everything was already set. Even the kickoff date was scheduled. And then the guy said, ‘Listen, I’m so sorry, but our CFO was not aware that you’re Israelis and we have a policy that we can’t work with Israelis.’” That's what ground-up narrative collapse looks like in practice: when public sentiment, left unmanaged for long enough, works its way into boardrooms. Alona traces the mechanics of it back to what happened after October 7, when she joined a pro bono initiative called Words of Iron, working to flag false information spreading on X about Israel. “I understood that this is where the narrative starts. It’s driven [by] the people, it’s driven from the masses. And then it affects so high up, to the point where VCs pull back, clients pull back, because the public sentiment is so bad.” The Iran conflict has added new layers to this. Nearly half of Israeli tech firms reported struggling with worker shortages during the conflict, and the ongoing conflict made it more difficult for entrepreneurs to secure funding in the short term, with global investors adopting a more conservative approach until the situation stabilised. For PR agencies navigating this, the question isn’t only what to say, but it’s whether to say anything at all. “If the coverage is mostly around what is happening in the war and your story can’t contribute to what is happening right now, there’s no room for that.” What makes her perspective useful is that she’s been here before. COVID, the post-October 7 period, now this. Each crisis has required a recalibration of the same fundamental question: what is your company actually contributing, and to whom? “You can provide good value. You can talk about the product without throwing names for the sake of throwing names, especially for such explosive matters.” During the lead-up to and throughout the campaign against Iran last year, 31 funding rounds took place — evidence that entrepreneurs kept building and investors kept writing cheques. But whether the narratives around those companies held are a different question. When we speak, there isn’t a clean resolution. What Alona has is 13 years of knowing where the line is between resilience and so-called ambulance-chasing, and the professional discipline to hold it even when founders don’t want to. Get full access to The Spiro Circle at www.thespirocircle.com/subscribe

    51 min

Om

Join me as I discuss issues relating to Israel, tech, media, and news. Sometimes with a guest, sometimes solo. www.thespirocircle.com