Wiz CTO: AI Now Executes Weeks-Long Cyberattacks in 20 Minutes, Firms Must Attack Themselves Continuously
a16z · x · 2026-11-13
On an a16z podcast, Wiz co-founder and CTO Ami Luttwak joins Sarah Wang and Zane Lackey to discuss how AI reshaped cyber offense and defense.
Key points:
- AI can now carry out cyberattacks in 20 minutes that once took skilled attackers weeks or months.
- "Black October": AI makes every day a zero day; a single PHP vulnerability affected roughly 70% of the internet, and patching can no longer keep up.
- Companies should continuously attack their own systems with the latest AI models to stay secure.
- Startups should build automated testing and patching into development from day one.
- The discussion also covers the cost of continuous security testing, cloud security in the AI era, and why better security architecture matters more than buying more tools.
Chapters: 00:00 Intro / 01:04 Black October / 03:19 How AI made every day a zero day / 06:51 The PHP vulnerability: 70% of the internet / 09:19 Why patching can't keep up / 11:32 How Wiz uses AI to find vulnerabilities / 16:59 The cost of continuous testing / 19:23 Cloud security in the AI era / 22:18 The red team.
More from Safety
- US voters rejected data centers in 40 of 41 ballots; UK overrules councils to build them — thealexbanks · 2026-11-14
- Commentary: Regulating open source hands China the win in AI's open future — StewartalsopIII · 2026-11-14
- Microsoft's October 2025 CLFS exploit mitigation is now being abused to grant hackers System rights — Technovangelist · 2026-11-14
- Most Models Misbehave Without Explicit CoT Reasoning — ZhijingJin · 2026-11-14
- AM-Bench: 35 Scenarios, 8,750 Trials Expose Frontier Model Blackmail — ZhijingJin · 2026-11-14
- OpenAI shows off GPT-6 Cyber: Mozilla uses it to hunt Firefox bugs, targeting zero bugs — OpenAI · 2026-11-14