
Small Business Cybersecurity: What You Don't See Can Hurt You with Last Pass CEO Karim Toubba
S6:E76
Security is ultimately a promise of trust. So what happens when that trust gets broken?
Karim Toubba has had to answer that question in circumstances few CEOs would choose.
He joined LastPass as their CEO only months before the company experienced a significant and highly publicized 2022 security breach. In this candid conversation, Karim acknowledges that LastPass initially communicated too slowly and explains the systemic changes, transparency, investment and cultural work required afterward.
Queue up this episode of Small Business Stories for a conversation that goes well beyond passwords.
Because the threat itself is changing.
Karim says AI is producing a meaningful productivity advantage for small businesses, but it is simultaneously allowing malicious websites and other threats to be generated at much greater velocity. Employees are also adopting AI applications faster than many organizations can establish policies around what data those applications should be allowed to access.
If people don't trust you, reassuring them that you're trustworthy isn't enough.
If customers cannot see credible evidence supporting what you say, they'll increasingly turn to third-party communities and other sources to interpret your credibility for themselves.
And if inaccurate or incomplete information about your organization remains unchallenged, the external interpretation of your company can begin separating from the reality inside it.
That's where Karim's cybersecurity experience intersects powerfully with Dr. LL's work on misinterpretation risk.
👤 Guest
Karim Toubba
CEO, LastPass
Cybersecurity executive with nearly three decades of industry experience
⚠️ Core Problems
- Credential theft remaining a major attack vector
- Password fatigue and poor security habits
- Trust erosion after a public organizational failure
- Employees adopting unsanctioned SaaS and AI applications
- Sensitive information being uploaded into AI systems
- AI accelerating the volume and sophistication of malicious sites
- Organizations confusing a security product with a secure culture
🥡 Practical Takeaways
- Make security easier to practice; complexity undermines adoption.
- Passkeys and biometrics can reduce dependence on traditional passwords.
- Treat every piece of information uploaded to an outside platform as something that could potentially become exposed.
- Understand both what AI tools employees are using and how they're using them.
- Cybersecurity requires technology, investment and culture not merely software.
- After trust is damaged, acknowledge what went wrong and provide evidence of what changed.
- Participate in third-party conversations about your company rather than assuming your owned communications control the narrative.
- Begin thinking beyond human identity: AI agents will also require identities, permissions and access controls.
⏱️ Timestamps
03:20 Passkeys, biometrics and the future beyond passwords
08:14 Rebuilding trust after the LastPass breach
13:00 What Karim says LastPass got wrong about communication
20:03 Dr. LL's Invisibility Decoder lens and hidden digital risks
21:45 AI adoption and the new small-business security problem
23:53 AI is dramatically accelerating malicious websites
27:36 Leading a company with a perpetual target on its back
36:01 How do customers distinguish security from reassurance?
🔖 Who This Episode Is For
Entrepreneurs, SMB leaders and executives trying to balance AI adoption, cybersecurity, employee behavior and customer trust without becoming paralyzed by the complexity.
At STEERus, we see a related Trust Blind Spot across industries: organizations frequently assess their credibility from what they know internally while customers, search systems and AI interpret them from the evidence available externally. Trust cannot simply be asserted. The signals supporting it have to be visible, consistent and credible.
Subscribe and share Small Business Stories for thoughtful conversations with leaders navigating the increasingly complicated relationship between technology, trust and business growth.
✅ Subscribe for weekly conversations on entrepreneurship
🔁 Share this episode with someone who needs to be heard
Follow STEERus on social media:
YouTube: https://www.youtube.com/@DrLLSmallBusiness
Instagram: https://instagram.com/steerus
LinkedIn: https://www.linkedin.com/company/steerus
Twitter: https://x.com/steerus_io
#entrepreneurship #smallbusiness #podcast #cybersecurity #riskmanagement #ai #password
Mais episódios de "Small Business Stories"



Não percas um episódio de “Small Business Stories” e subscrevê-lo na aplicação GetPodcast.








