Every Day Is Zero Day | Wiz CTO Ami Luttwak

We're going back to the nineties and two thousands again. We're gonna see breaches popping out all the time again now. It's gonna look very different than the last fifteen years of security. AI attackers that are actually going after companies, start ups in scale and speed that we've never seen. Elon Musk tweeted that recently, Everyday is Zero Day. What is AI doing to make this happen? Models are good enough now to find and exploit complex vulnerabilities. And the other is that they're open source models. That's the scary bit. A few months ago, we said we have a few months until open source models catch up. So now they're catching up. The security game has just changed. You need to be thinking about how you can automate so much of both the blue side and the red side right now. Most of what security teams do is not security. We should stop doing most of what we do and focus on finding critical risk, figuring out how we mitigate it, or at least put detections in and also response readiness for it. What do you think the next several years looks like? AI attacks are prevalent, easy, but also better than any human. That's the problem. The only companies that will be able to survive are companies that are... What happens when an attacker can do in twenty minutes what once took an elite security team weeks? A16z general partners Sarah Wang and Zane Lackey sit down with Wiz co founder and CTO, Ami Ludvak, to unpack how AI is changing cybersecurity on both sides. Ami explains how attackers are using AI to find vulnerabilities and move from an initial opening to a full compromise of machine speed, while patches still move slowly through the software ecosystem. They also discuss what defenders can do: continuously test their own systems, automate investigation and response, and build infrastructure assuming vulnerabilities will exist. The question now is whether defenders can adapt as quickly as attackers. Ami, thank you so much for joining us. Security professionals are calling October Black October, and it's clear that we're entering a new era of agentic attacks. Can you, just to start off, walk us through what the heck is going on right now, and how do we get through this critical moment? Yes. So first of all, great to be here. We are calling this Black October since it's, in my view, like a black swan event. We've never seen, never ever, seen so many security incidents happen in a single month. And we are talking about multiple different types of security incidents, both the number of vulnerabilities that has been found in October and the severity of those vulnerabilities, including the PHP vulnerability, probably the most severe vulnerability ever found by AI. Right? So, vulnerabilities coming in a rate that we've never seen. But on the other hand, even worse, we're seeing the rise of AI attacks. Right? So, AI attackers that are …