AI Threats: CISOs Need "Shift Zero" Security

CISOs need a "shift zero" security approach to combat AI-driven threats. That's according to Lou Fiorello of ServiceNow. He explains that AI-driven attacks are making the time to identify and exploit vulnerabilities approach zero. One organization he discussed operates 160,000 AI agents, a number expected to grow to millions. This scale demands a new strategy: mitigating risk at the source before vulnerabilities appear. Fiorello says defenders have an advantage because they know their own environment. Understanding devices, configurations, and AI agent inventories can reduce exposure. The challenge is to operationalize this knowledge at machine speed with automation and consistent policies. For CISOs, securing AI systems in production involves agent inventory, identity management, vulnerability management, and governance. This matters because it outlines a proactive way to protect against the rapidly evolving threat of AI-driven attacks.