7 to 9 minutes.
7 to 9 minutes. I was going to say an hour.
7 to 9 minutes is way worse.
Yeah. Then you start thinking about, okay, so how long does it take for a patch to be applied to infrastructure from the time that a vulnerability is announced? About 45 days.
Oh gosh, really? 45 days.
The exploit starts happening in 7 minutes. The bad actors, the adversaries are already attacking your system within 7 to 9 minutes, and it's taking you 45 days to go out and do a patch. So the current system simply does not work. What you have to do is fundamentally rearchitect it.
Hello everyone and welcome back to MTS. Today I am joined by G2 Patel, who is the president and chief product officer at Cisco, and he oversees Cisco's product portfolio across networking, security, compute, Splunk, silicon, and the infrastructure companies are now rebuilding for AI. But one of the exciting news is that Cisco is also working with both Anthropic and OpenAI on frontier AI systems designed to find security vulnerabilities before attackers do. So G2, welcome to MTS.
Thank you for having me, Sophia. And it's great to be here.
Excited to have you. I would love to learn a little bit about what you guys are working on with Anthropic and OpenAI. Can you tell me a little bit more about that project?
Sure. It's actually a multitude of projects, but we've been working with the frontier labs for a while now, where we are also investors in Anthropic. But you know, with OpenAI, Codex was — we were the first design partner for Codex. We have 32,000 engineers; they all use Codex. We will have about half a dozen products that'll be fully written with AI by the end of the year. 70% of our portfolio will hopefully be fully written with AI by the end of next year. So when you think about $63 billion of revenue at that scale, having AI so broadly proliferated, it wouldn't have happened without the partnerships we've had with these companies, and you know, a lot of debt of gratitude from us to them.
That's pretty exciting. I know you guys are working directly with Anthropic on the project Glasswing, and you're working with OpenAI on Daybreak, right? And so what my understanding is is that you actually get to put this frontier AI against your own software, and you're using it to find vulnerabilities before attackers actually do that. What's been happening lately in AI cybersecurity that made Cisco decide this is super necessary now?
Yeah, I mean, look, the thing is, is we are — the way you should think about us is we are critical infrastructure for the critical infrastructure. So what happens if you have a cyber attack with a hospital or a power plant or, you know, a water supply, a water company, is like lives can get lost. And if your hospital goes down, before you know it, you can't get dialysis. If your power goes out in three, four days, you know, a city runs out of food supply. And so like there's meaningful dire consequences that can happen as a ripple effect of a cyber attack. And these cyber attacks now are happening at machine scale. And when Mythos first came out, Anthropic, you got to give them a lot of credit. What they did was they said, 'Let's not roll this out to everyone. Let's make sure that we take it out to just a select few people so that we can really learn,' because it knew how to go out and identify vulnerabilities at a much, much faster pace than what we've ever seen before.
And so what we did was we hardened our infrastructure as a result of being part of Project Glasswing, which by the way is not just good for Cisco, it's good for the entire world because a substantial percentage of traffic in the world goes through Cisco infrastructure. So it's important that we don't have that get compromised. And so we've done that not just with Glasswing with Anthropic, but we've also done that with Project Daybreak with OpenAI. And I think both of them are great partners that are actually, you know, they sometimes might get a bad rap, but they're really concerned about security. And the people that we talk to, you know, it's yes, we talk to Sam and Dario and all those folks, but the people we talk to within those labs, they really, really, really care about making sure that the world is safe and secure.
Yeah. No, that's really interesting to understand from the inside because both Anthropic and OpenAI, of course, as you alluded to, deeply, deeply care about security. One thing I want to get from your perspective though, because you do get to work with both of these companies and you get to work with them on these different projects, do their systems have different types of approaches to finding these vulnerabilities and problems? What did you learn from working with both of them?
I think they keep going. It's not as much about the approach but the ease and the speed at which you can find them and then what can you do about those problems that you find, because one of the challenges that you have is just finding problems and not doing something about them doesn't really help much. Yes, you need to know what the problems are. The challenge that you have is from the time that a vulnerability is announced in the market to the time that you have an exploit happen is — take a guess, Sophia. How long do you think an exploit takes from the time a vulnerability is announced?
Oh my gosh. 7 to 9 minutes.
7 to 9 minutes. I was going to say an hour.
