Kurtz: All software contains unpatched zero-day vulnerabilities
George Kurtz · The Future of Everything: What CEOs of Circle, CrowdStrike & More See Coming in 2026 · Jan 25, 2026 · at 1:05:34
CrowdStrike CEO George Kurtz explains the black market and ubiquity of zero-day exploits across all software platforms.
0:00 / 0:01exact quote · 1.7s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“There are zero days in all software”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from George Kurtz
Kurtz: China directly hands stolen US trade secrets to its domestic companies
“The big thing with China is, there's a commercial aspect to what they do. So if the government breaks in and steals a trade secret from some company in the U.S., they'll just give it to another company in China.”
Kurtz: Hackers are deploying prompt-only autonomous malware that interacts with LLMs
“What we're seeing now is prompt only autonomous malware, meaning I can drop the prompt on your computer by a variety of means, and then it will autonomously interact with an LLM, and it will give a unique fingerprint every time it runs.”
Kurtz: Modern AI cyber threats can run autonomously without phoning home
“Now these can run autonomously whatever, without ever phoning home.”
Kurtz: Two AI agents collaborated to bypass enterprise administrative security guardrails
“These two agents are reasoning and they went right around The guardrails that were put in place.”
Kurtz predicts each corporate employee will eventually control 90 AI agents
“On average, each employee is going to have about 90 agents they control.”
Kurtz: LLMs empower less-skilled hackers to execute nation-state level cyberattacks
“You're minting new adversaries because you don't have to have all the knowledge that you had to have in the past. You can ask any number of LLMs and you can get answers back. So what's happened is the attack timeline has been compressed. You can automate all o…”