Palo Alto Networks CEO: The Cyber Panic Is Just Getting Started
Ask about All-In Podcast
Episode Description
Follow the besties: https://x.com/chamath https://x.com/Jason https://x.com/DavidSacks https://x.com/friedberg
Follow on X: https://x.com/theallinpod
Follow on Instagram: https://www.instagram.com/theallinpod
Follow on TikTok: https://www.tiktok.com/@allin
Follow on LinkedIn: https://www.linkedin.com/company/allinpod
Intro Music Credit: https://rb.gy/tppkzl https://x.com/yung_spielburg
Intro Video Credit: https://x.com/TheZachEffect
Brief Summary
A PHP vulnerability sparks a warning that cyberattacks may come faster than every 10 days, with patching and perimeter defenses as key responses.
Key points
- The technology debt comes due. The speaker warns that neglected technology debt must be addressed sooner or later, and that attacks may come far more often than every 10 days.
- Two ways to stop the vulnerability. Organizations can patch the vulnerable code directly or use a perimeter defense product to apply a virtual patch that blocks attackers.
- Punching in the face every morning. The phones keep ringing as customers look for a way out of the relentless cycle of cyberattacks.
Transcript
There's a cyberattack. What's going on? Is this an acute issue or is this a harbinger of things to come and is this going to happen every 10 days? >> Jason, I think 10 days is too long. I think this thing's going to happen much faster than every 10 days. I think part of the challenge we're seeing is we've been talking about technology debt that we've all have to go pay sooner than later. And what's happened is people have not paid attention to the idea that they have to go fix their stuff. We found out about this a few days ago. We scanned everything in our infrastructure to make sure that there were no issues. We made sure that our products had patches available for our customers who
deploy them. So, there's two ways to solve this problem, right? One, you can go in and patch the vulnerability. You can go in, find the code, patch what has been given to you by PHP and make it work. The other is you can actually put it in a perimeter defense product like ours or Cloudflare has one or other firewalls have one. We put the patch there. It's a virtual patch so any attacker trying to access that vulnerability can stop the perimeter because we know what they're looking for. >> Yes, Scott, the phones keep ringing every day and the conversation always is now, how do I get out of this because I'm tired of getting punched in the face
every morning when I wake up. [laughter]
