a16z: patching can't keep up with AI-speed attacks, rebuild defense in depth

AccBalanced · x · 2026-11-09

a16z's Asaf Ezrachi and Steph Zhang argue that AI has collapsed the offensive bottleneck of turning bugs into working exploits, so no one can patch in time. Their rebuilt defense-in-depth framework: 1) get systems off the open internet, 2) segment what must stay connected, 3) block attacks in the network at machine speed, 4) remove whole vulnerability classes as the most durable fix. The accompanying chart maps five gates an attack must pass (Reach/Bug/Run/Spread/Recover), noting patch speed only helps at gate 2.

Original post →

More from Safety

Safety channel →