How Microsoft is Adapting to the AI Era

Over deze video

a16z's Joel De La Garza is joined by Aaron Zollman, Deputy CISO at Microsoft Gaming, to discuss how security teams can embrace AI agents without losing control. Aaron shares Microsoft's experience with OpenClaw, from the initial instinct to ban it to figuring out how to make it safe to use. They unpack what agents mean for identity, permissions, containerization, and monitoring, as well as how AI is shifting the CISO's role from saying "no" to safely enabling new technology. They also explore whether AI could help defenders patch vulnerabilities as quickly as they're discovered, and why new AI threats don't make the old security problems go away. Timestamps: 00:00 - Intro 01:00 - Aaron Zollman: A Deputy CISO in the AI Era 03:44 - Microsoft's Experience Rolling Out AI Agents Securely 06:00 - Agents Are Unpredictable Interns: Threat Modeling from First Principles 09:11 - When "Air Gapped" Isn't Air Gapped: Tunnels, DNS & Overfit Evals 13:29 - The End of VulnPocalypse: When AI Patches as Fast as It Finds 15:52 - The CISO as Enabler: From "No in 80 Languages" to Risk Manager 19:34 - Black Hat 2025: The Vibe & the Coming Supply Chain Pain Resources: Follow Aaron Zollman on LinkedIn: https://www.linkedin.com/in/zollman/ Follow Joel De La Garza on LinkedIn: https://www.linkedin.com/in/3448827723723234/ Stay Updated: If you enjoyed this episode, be sure to like, subscribe, and share with your friends! Find a16z on X: https://twitter.com/a16z Find a16z on LinkedIn: https://www.linkedin.com/company/a16z Listen to the a16z Show on Spotify: https://open.spotify.com/show/5bC65RDvs3oxnLyqqvkUYX Listen to the a16z Show on Apple Podcasts: https://podcasts.apple.com/us/podcast/a16z-podcast/id842818711 Follow our host: https://x.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see http://a16z.com/disclosures.