AI Summary
5 min readIn October 2024, the cybersecurity world experienced what Wiz CTO Ami Luttwak calls "Black October"—a Black Swan event where a wave of AI-powered attacks and vulnerabilities converged at a speed and scale never seen before. The core shift is that AI models, particularly open-source ones, have become good enough to find and exploit complex vulnerabilities in minutes, collapsing what once took elite human attackers weeks or months into a 20-minute window. As Luttwak puts it, "AI attacks now are prevalent, easy, but also better than any human. That's the problem." The episode explores how defenders must fundamentally rethink their approach—moving from static, periodic security checks to continuous, automated, and AI-native defense.
The Mechanism: Why AI Changes Everything for Attackers
Continue reading the full summary in the app — free to try.
Read Full Summary →Free • No credit card required
Never miss an episode of a16z Show
Get every new episode summarized in your inbox — free, ~5 minutes to read.
No spam. Unsubscribe anytime.
What you'll learn
- 1 (00:00) **Episode Introduction & the "Black October" Thesis** - Sarah Wang and Zane Lackey set up the episode by stating that AI has fundamentally changed the security landscape, making "every day a zero day" and ushering in an era of agentic attacks.
- 2 (02:09) **Ami Defines "Black October" — A Convergence of AI Threats** - Ami Luttwak explains that October was unprecedented because two previously theoretical threats became real at the same time.
- 3 (03:37) **The Mechanism: How AI Collapses the Attack Timeline** - Ami breaks down the core mechanism by which AI speeds up attacks from months to minutes, focusing on the role of open-source models.
- 4 (06:54) **Case Study: The PHP Vulnerability & the Patching Gap** - Using the PHP vulnerability as a concrete example, Ami illustrates the fundamental mismatch between attack speed and defense speed.
- 5 (08:49) **Why AI Can't (Yet) Automate Patching** - Ami explains why, despite AI's offensive prowess, automating the defensive side of patching remains a massive unsolved challenge.
- 6 (10:58) **The "Bitcoin Mining" of Vulnerabilities & Using Multiple Models** - Ami describes how the vulnerability research landscape is changing, with multiple teams finding the same critical flaws simultaneously, and explains his strategy for using multiple AI models.
- 7 (16:19) **The Paradigm Shift: From Static Scans to Continuous Testing** - The conversation shifts to the fundamental change in security strategy required by the new threat landscape.
+ Full timestamped outline available in the app
Show Notes
AI isn’t just helping defenders find vulnerabilities. It’s giving attackers the speed and expertise to exploit them faster than many companies can respond. Wiz co-founder and CTO Ami Luttwak joins a16z General Partners Zane Lackey and Sarah Wang to unpack what he calls “Black October,” a wave of vulnerabilities and agentic attacks that he believes marks a turning point for cybersecurity.
They break down PHP2Shell, why AI is collapsing the time between vulnerability discovery and exploitation, and what happens when open-source models put increasingly sophisticated offensive capabilities in more hands. Ami explains why startups are becoming attractive targets, particularly when they hold valuable AI credentials, and why yesterday’s secure architecture may no longer be secure as models improve.
The conversation then turns to defense. Ami argues that companies need to continuously attack their own systems, automate investigation and patching wherever possible, design infrastructure assuming sophisticated attackers will get in, and rethink security stacks built for a slower era. His warning is simple: if attackers can move in minutes, defenders can no longer operate on human timelines.
Resources:
Follow Ami Luttwak on X: https://x.com/amiluttwak
Follow Sarah Wang on X: https://x.com/sarahdingwang
Follow Zane Lackey on X: https://x.com/zanelackey
Learn more about Wiz: https://www.wiz.io/
Read ‘The Rise of Agentic Attacks: What They Look Like, and Where They're Headed’: https://www.wiz.io/blog/the-rise-of-agentic-attacks
Read more from Wiz’s blogs: https://www.wiz.io/blog
Stay Updated:
Find a16z on YouTube: YouTube
Find a16z on X
Find a16z on LinkedIn
Listen to the a16z Show on Spotify
Listen to the a16z Show on Apple Podcasts
Follow our host: https://twitter.com/eriktorenberg
Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a1