Nov 10, 2026 · 33 min
AI-driven attacks expose the limits of patching
The next name on CISA's door.
The episode connects fast-moving exploitation with unpatchable operational technology, uneven cyber readiness, and pressure on CISA to modernize national reporting.
- 1Michael LoSapio’s nomination to lead CISA comes alongside efforts to standardize incident reporting and align it with MITRE ATT&CK.
- 2Iran-linked attacks on European supermarket refrigeration show how exposed industrial systems can turn cyber access into physical disruption.
- 3Duncan Greatwood argues that zero trust and micro-segmentation must supplement patching as AI compresses the attack cycle.
Don't miss
Duncan Greatwood explains why critical infrastructure cannot always be patched and makes the case for zero trust and micro-segmentation as preventive controls.
The brief
Michael LoSapio, Palantir’s chief information security officer, has been nominated to lead CISA as the agency works to modernize incident reporting with standardized data and MITRE ATT&CK alignment.
The headlines show cyber risk moving across domains: Iranian-linked actors disrupted supermarket refrigeration, Turla hid espionage in Exchange processes, and attackers chained Barracuda gateway flaws.
An assessment finds European cyber maturity improving but uneven, with disparities in incident response, skills shortages, supply-chain concerns, and operational disruptions still shaping exposure.
Duncan Greatwood of Xage Security argues that AI-enabled attackers are shrinking the patch window while critical infrastructure often cannot be patched quickly or at all.
His proposed answer is architectural rather than reactive: inventory vulnerable assets, enforce strict authorization, and use zero trust and micro-segmentation to contain compromise.
The episode closes by examining whether AI could challenge cryptographic assumptions and how Chinese AI firms are recruiting researchers from Silicon Valley.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.