Joel de la Garza tells Theo Jaffee that AI tools may lower the cost of finding longstanding vulnerabilitiesAutomated vulnerability discovery uses software analysis and testing to identify potential security weaknesses with reduced manual effort., but says he cannot attribute the week’s disclosures to a particular model. He distinguishes active exploitation, leaked information and defensive patching, and cautions that breach information can take time to emerge.
De la Garza argues that organisations should sustain patchingPatch management is the organised process of identifying, evaluating, deploying and verifying software updates that fix defects or security weaknesses. capacity, allocate security and engineering resources, and avoid shipping vulnerable products. He discusses hardware and low-cost connected devices as harder cases, while describing critical infrastructure as unevenly prepared.
Asked about disruption, he predicts that some services may be taken offline temporarily for upgrades, but says he cannot assess the probability of a specific power-grid outage. The discussion also covers multifactor authentication, password reuse and social engineering; these are the speakers’ assessments, not a guarantee that any system is safe.
Watch on YouTube
