Bellini Capital CISO says faster patching cannot close AI exposure
Original title: Bellini Capital CISO on AI security governance and the limits of patching faster
Brian Blakley argues attackers turn flaws into exploits faster than defenders can test, approve, and schedule patches.
In a Help Net Security interview, Bellini Capital CISO Brian Blakley says AI speeds vulnerability discovery for attackers and defenders, but remediation still depends on impact assessment, patch testing, and maintenance windows. He proposes shrinking exposure with segmentation, isolation, and compensating controls while fixes are pending, and a shared CIO-CISO metric tied to delivering critical initiatives with risks addressed or explicitly accepted. He also describes regression tests for silent model changes and says organizations cannot delegate accountability to AI agents. He reports no silent-update incident at his company.
Unconfirmed: Blakley says the lack of a silent-update incident may only mean his team was not measuring the right signals.
- He abandoned the view that AI helps attackers and defenders about equally.
- A model shift could reprioritize a flaw without any product setting changing.
- His team pins model versions where providers allow it.
- He says risk acceptance must not be scored as remediation.
- The interview text cuts off during an agentic outbound-calling pilot.
From the original article
6 min read at helpnetsecurity.com
In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams need to cut exposure while remediation is pending.
By Mirko Zorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.