Wiz CTO on 'Black October': AI Collapses Exploit Timelines to Minutes
a16z · youtube · 2026-11-13
In an a16z podcast, Wiz co-founder and CTO Ami Luttwak joins Zane Lackey and Sarah Wang to discuss what he calls 'Black October,' a wave of vulnerabilities and agentic attacks he sees as a turning point for cybersecurity.
Key points:
- AI helps defenders find flaws but also gives attackers the speed and expertise to exploit them faster than companies can respond, collapsing the gap between discovery and exploitation.
- The PHP2Shell vulnerability affects roughly 70% of the internet; patching can't keep up.
- Open-source models spread sophisticated offensive capabilities more widely; startups holding valuable AI credentials become attractive targets.
- Defensive advice: continuously attack your own systems, automate investigation and patching, design infrastructure assuming sophisticated attackers get in, and rethink security stacks built for a slower era.
- Discussion of 'red agent' self-attack and agent swarms attacking your own systems, plus where security budgets should go and what founders must do before shipping.
- Core warning: if attackers move in minutes, defenders can no longer operate on human timelines.
More from AGI Musings
- Jensen Huang's first X post champions open models via NVIDIA-signed letter — lvwerra · 2026-11-14
- X debate: wrongly assuming AI lacks consciousness could risk extinction-level outcomes — erikphoel · 2026-11-14
- AI auditing organizations face recruiting crunch as talent flocks to labs — ShakeelHashim · 2026-11-14
- Anthropic CEO Dario Amodei says his company has the potential to 'solve biology' — Polymarket · 2026-11-14
- Frontier models will first emulate how scientists reason, not simulate biology — kenbwork · 2026-11-14
- Two Claude instances left to chat freely drift into consciousness talk, greet in Sanskrit — kevtargaryen93 · 2026-11-14