{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"The AI Cookbook Show by Malcolm Werchota","title":"#137 - The Vulnerability Tsunami, Part 2: AI Found the Bugs. Who Fixes Them? Werner's 3 a.m. Call, Bank of America's 1,000 Contractors and Herbert's Father's Code","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/b6d170a4\"></iframe>","width":"100%","height":180,"duration":2246,"description":"Three in the morning. The CEO calls the head of IT: governments around the world are shutting down their websites, do we need to do this too? The head of IT is called Werner. He has eight people in his team, two of them install printers all day, and his hosting provider's hotline opens at 8 a.m.\n\nPart 2 of the AI Drama double on the Vulnerability Tsunami. In Part 1 we watched the digital doors swing open. Now we walk through the door on the other side, into the IT department. AI finds the bugs faster than ever, but fixing, testing and deciding is still done by humans. And that is where the bottleneck sits.\n\nIn this episode:\n☎️ \"Can we keep working today?\" (00:55) — meet Werner, head of IT at a family-owned supplier with 600 people and three plants. What he can actually answer at 3 a.m., why he can't reach his hoster or his CEO, and why most heads of IT aren't even allowed to decide whether to switch the website off. Within hours, public scanners for the PHP flaw were on GitHub, not on some dark web forum.\n🏦 The machine finds. The bank needs more hands. (07:59) — Bank of America's CEO Brian Moynihan told CNBC the bank brought in about 1,000 external contractors to work through fixes, on top of its existing teams. And Werner? He might get three more developers in nine to twelve months, at local salaries.\n📥 The inbox is not the repair (12:17) — a code landscape the size of France, and you're looking for one toxic pen. Libraries, staging, and Susie, who looks after a library in the evening while Werner calls three times about the PHP patch. AI brings crazy visibility, and IT departments aren't built for it.\n🩻 Who gets to use the X-ray machine? (17:14) — Copilot in this context is your grandmother in 2026 saying black-and-white TV is incredible. Why you need an agent on the command line, not a chat window. Data protection, IT security, the works council and procurement all say no, and your developers already use the tools on private accounts. Plus Stack Overflow and...","thumbnail_url":"https://img.transistorcdn.com/K89WOul5lFP6eyTkepgc48DwnmOLDjvzPf-VdoMUwqc/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS84Y2I2/YTZiNWNmNGE5NmYy/NzE4ZTAyMTYxYjNh/ZmM5Zi5qcGc.webp","thumbnail_width":300,"thumbnail_height":300}