Kevin Mandia 创办 Armadin：用 AI 智能体群抢先攻击企业网络找零日漏洞

Kevin Mandia on why companies need an agent swarm polling their network like a heartbeat, because the window to catch a new security hole keeps shrinking: "We do a thing called a hyperattack. That's just a fancy word for we throw a drone swarm of agents at you, and we map your network. Every service, every route, every system, all assets." "With that metadata, we now just poll you almost like a heartbeat. What's changed? Did an app change? Did a route change? Did a service get updated? So that we can poll cheaply for change and then attack the change." "What you really want in the AI age is the constant pressure of models attacking you... You do it when either the threat changes, new models come out, new intelligence is available, or your network changes." "That's what we had over the weekend. There was a zero-day in a popular product, and immediately we've already got the heartbeat. We just polled who's got the problem." "Our goal at Armadin is to go from a known vulnerability to knowing whether it's actually exploitable before the bad guys can." @ArmadinSecurity @DavidGeorge83 Your browser does not support the video tag. 🔗 View on Twitter a16z @a16z . @ArmadinSecurity is a new company that uses AI agents to attack your network before criminals do, finding real exploitable zero-days and eventually patching them autonomously. Their agents map every service, route, and system from the outside, then re-attack whenever something changes. Since January that's uncovered 90+ zero-days at Fortune 500 companies. Kevin Mandia spent 30 years responding to some of the worst breaches in the world and built Mandiant, now a core part of Google Cloud's security arm. He had no plans to start another company until AI arrived and changed everything: in his words, "everything I did is dead." He joins a16z's David George to talk about why he came back and what Armadin is building. In this conversation, they cover what AI attacks look like today, why nation states hack like a sniper and AI hacks like a drone swarm, and why the only defense fast enough to keep up is one with no humans in the loop. 1:05 "Everything I did is dead" 3:10 AI on offense, AI on defense 4:20 What an AI attack looks like today 7:20 Sniper rounds vs drone swarms 10:25 Map everything, attack what changes 14:35 The problem with pen tests 16:40 90+ zero-days at Fortune 500s 18:35 A bad patch beats an intrusion 20:55 Why humans are too slow for the SOC 24:30 Why the next year in cyber won't be pretty 26:30 How Mythos changed the threat 28:15 Caging the attacker Armadin built 30:05 Open and closed models tied on offense 34:40 AI is finding zero-days on its own 35:45 Mandiant in 2004 vs Armadin in 2026 41:20 Why Armadin retrains sales every week YouTube: youtu.be/cJsHel27Z6M @ArmadinSecurity @DavidGeorge83 Your browser does not support the video tag. 🔗 View on Twitter 🔗 View Quoted Tweet 💬 0 🔄 0 ❤️ 5 👀 1994 ⚡