Google CISO Phil Venables: AI floods teams with vulnerabilities, but also cleans code
philvenables · x · 2026-11-04
Google CISO Phil Venables breaks down the "Vulnapocalypse" in good news/bad news form: AI tooling has dramatically increased vulnerability discovery, and many orgs sit on years of accumulated software, config, and structural flaws — yet attackers' resource constraints have kept many from being exploited, though industrialized attacks and agent swarms may change that. The same AI capability enables "deep cleaning" of major codebases to historically low vulnerability levels. He advocates patch intelligence, staged rollbacks (5% → 20% → 100%), and patchable architectures to raise deployment velocity without breaking production.
More from Infra
- Satellite study constrains hyperscale data-centre heat footprint, contradicting earlier alarm — AndyMasley · 2026-11-05
- vLLM + Megatron add Day-0 RL support and long-agent serving for Kimi K3.1 — vllm_project · 2026-11-05
- Kimi K3.1 Pro hits 61.2% on long-horizon code bench, up from 55.95% — vllm_project · 2026-11-05
- CoreWeave Shares Hit 52-Week Low as AI Compute Leasing Stocks Slip — GaryMarcus · 2026-11-05
- Ollama's free plan goes pay-as-you-go Nov 9: six cloud models will need credits — shoumikgoswami · 2026-11-05
- Four Free CUDA Courses to Fill the GPU Programming Gap — techNmak · 2026-11-05