Palo Alto Networks CEO urges hybrid patching against AI threats
Nikesh Arora says combining direct software patches with network-level virtual patching is a realistic response as AI models find more flaws.
Palo Alto Networks CEO Nikesh Arora said AI models will keep finding more software vulnerabilities as their performance improves, and proposed a “hybrid patch” approach in response. In a post on X, he argued that hybrid patching and reform of the security operations centre (SOC) are realistic answers to AI-driven hacking threats.
Arora described the hybrid approach as combining direct software patches with virtual patching at the network level. He said defenders need what he called “modern frontier defenders” covering network traffic, cloud application traffic, WAF and endpoints.
He also warned that defending against attacks driven by swarms of AI agents is impractical, citing token costs and current security structures. Fixing the SOC structure is the starting point, he said, linking logs, threat intelligence and security products through SOAR.
Arora said companies lack urgency and fail to make fast decisions, and predicted they will keep taking systems down to patch PHP today and something else tomorrow. He added that the security industry, not frontier AI labs alone, has kept infrastructure safe and must assure boards and organisations.
With billions being poured into coding, he urged organisations to check the security of their coding harnesses.
Quick answers
What is Nikesh Arora's “hybrid patch” approach?
It combines direct software patches with virtual patching at the network level.
Where did Arora make the comments?
In a post on X, according to Palo Alto Networks CEO Nikesh Arora.