a16z：AI 能在数小时内把补丁变成可用的漏洞利用，防守思路要改
a16z 说 AI 现在几小时就能把补丁变成攻击工具，但企业打补丁要几周，他们列了 6 个对应的创业方向，做安全的可以看看。
a16z 的 Asaf Ezra 和 Steph Zhang 撰文指出，AI 已经能在数小时内把公开补丁逆向成可运行的 exploit，而多数企业打补丁仍需数周，老旧路由器、摄像头等设备甚至永远等不到修复。文章据此提出 6 个新安全公司的创业方向，包括在运行系统上数小时内拦截 exploit 的 live fixes、无需手写规则的 AI 攻击响应、凭证数分钟过期的 per-request access 等。核心论点从'如何更快打补丁'转向'如何让打补丁变得不必要'。
AI can now help turn a published fix into a working exploit in hours. Patching still takes weeks, and for many old routers, cameras, and supermarket fridges, a fix never arrives. "So the question isn't how to patch faster. It's how to stop needing to." Six openings for new cybersecurity companies today, each one making patching "unnecessary, or someone else's job": 1. Live fixes: blocks an exploit on running systems within hours, then has AI write and ship the real code fix 2. An AI first responder: spots attacks without hand-written rules and contains them as they unfold 3. Per-request access: checks every request from a person or their AI agents, with credentials that expire in minutes 4. Proven recovery: keeps restoring your backups in a sealed-off test environment to prove they work, with records insurers will accept 5. An install gateway: holds and sandboxes every package, extension and AI agent tool before it can run 6. Security for the long tail: one managed service for water utilities, clinics and others that will never have a security team Full piece from a16z's Asaf Ezra and Steph Zhang: a16z.news/p/defense-in-d… Asaf Ezra @asaf_ez x.com/i/article/2118… 🔗 View Quoted Tweet 💬 9 🔄 1 ❤️ 22 👀 5079 📊 8 ⚡
