Chaudhry 指出无休止打补丁并不足够，企业必须重新思考防御方式。
大家都在一味打补丁，但没人能真正打完补丁。补丁固然重要，但需要换个角度看问题。原文 (en)
Everyone is focused on patching and patching and patching. No one is done patching ever. So while patching is important, I think you need to look at things differently.
Chaudhry 认为 AI 时代的新威胁无法用传统安全手段应对，需要全新的方法。
但我想强调的一点是，AI 到来之后，不能再用老式安全手段来抵御这些新威胁，需要换一种思路。原文 (en)
But the one point I want to make is when AI comes in, you can't keep on doing old type of security to fend off these new threats. You need to look at a different approach.
Chaudhry 主张将应用隐藏在 Zscaler 云交换平台之后，使攻击者无法发现和攻击。
新方法是把应用隐藏在我们构建的云和交换平台之后，坏人根本找不到你；找不到你，就无法攻击你。原文 (en)
The new approach is if your applications can be hidden behind some kind of cloud and exchange that we built, bad guys can't even find you. If they can't find you, they can't attack you.
Chaudhry 表示互联环境中攻击者一旦突破一处就会横向扩散，需要零信任来遏制。
当所有办公室互联时，坏人只要进入一处就会扩散。为此需要引入零信任。在打补丁之外采用这两种方法，我们就能处于良好状态。原文 (en)
when all these offices are connected to each other, the bad guys get into one office. For that, you need to bring zero trust. If we do these two approaches in addition to patching, we'll be in a good shape.
Chaudhry 称 24 小时内发现 1200 次针对 PHP 服务器的独特攻击，呼吁以主动方式取代防火墙。
过去 24 小时内，我们的研究团队发现针对 PHP 服务器发起了 1200 次独特攻击。这类事情还会发生，我们需要用新方法主动防御，而不是旧的防火墙式安全。原文 (en)
in the last 24 hours, our research team found 1200 unique attacks that are launched on the PHP servers. And those things will happen, we need to get proactive with newer approaches, not old firewall based security.
Chaudhry 认为保护消费者的责任在企业，企业应设置安全护栏，尤其是应对 AI 智能体。
我不指望消费者精通技术和网络安全，而是期待银行和零售网站更专业。企业正在设置更好的安全护栏来保护消费者。原文 (en)
I don't expect consumers to be very tech savvy and cyber savvy. I expect banks or all these retail sites to be more savvy. The better security guard rails are being put by enterprises so that consumers can be protected.