Sasha Small

Patch or Die! Today we sent the following out to the CEOs in our portfolio regarding the widespread vulnerabilities that have been detected by AI agents: The previous week should make it obvious that things have changed. Vulnerabilities are being discovered and exploited at a rate that has never been seen before. While there has been a flood of new vulnerabilities AI agents are being adopted at scale multiplying the potential risk. Agents not only help automate the attacker lifecycle, every ai agent is an insider threat. Your environments are designed to withstand attacks from the outside, not from within. As such, we are suggesting company leaders consider the following changes: 1 - Ensure you're sufficiently staffed for security. The average enterprise allocates roughly 10% of its tech spend to security. Consider doubling that. There are likely thousands of vulnerabilities that need fixing in your environments. Security through obscurity no longer works, all that can be exploited will be exploited. 2 - Establish a zero tolerance policy for secuirty bugs in new features and product releases. Re-examine launch and release schedules and consider delays to ensure all vulnerabilities are patched before deploying new features or products. 3 - Double tap the zombies. Find all old legacy environments that have been neglected and turn them off. Labs, test environments, zombie CI/CD projects etc. Turn it off for now. If it isn’t tied to revenue, kill it. 4 - End the risk acceptance process. Over the last 10 years the risk acceptance process has morphed from a way to accept risks to enable the business, to a way to justify never fixing security issues. Adopt a zero tolerance policy for security issues and risks.