Summary
In this a16z conversation, a cloud security leader from Wiz describes what security professionals are calling “Black October,” a month with an unprecedented number and severity of vulnerabilities and a rise in AI-driven attacks. The discussion centers on how frontier models can now find and exploit complex vulnerabilities, including a severe PHP flaw described as possibly the most serious ever found by AI.
The guest argues that an attack that once took skilled humans weeks or months can now be run in roughly 20 minutes, which is why “every day is zero day,” a phrase also shared by Elon Musk. A major concern is open-source models, which are estimated to trail the offensive capabilities of leading closed models by about six to nine months and are closing the gap. Even simple mistakes, such as an API misconfiguration, can now be found and exploited at scale.
The conversation also covers what this means for founders and security teams. Old cloud security problems have not gone away, so teams still need to focus on critical risk. Customers increasingly expect agentic workflows that go from detection to full investigation, root-cause analysis, code fixes and pull requests. The guest argues that security teams should stop spending effort on routine tasks, automate both defensive and offensive work, and invest in detection and response readiness.
📺 Source: a16z · Published November 13, 2026
🏷️ Format: Interview
