字号·· | 护眼
thenextweb

Bitdefender 推出新工具,绘制攻击者通往关键系统的路径Bitdefender’s new tool maps how attackers could reach critical systems

点「原文对照」整页切到原文,或双击某段只看那段的原文。

2023年2月拍摄的罗马尼亚布加勒斯特Orhideea Towers大楼内的Bitdefender总部。图片来源:ChristineBD via Wikimedia Commons,CC BY-SA 4.0(经调整尺寸)Bitdefender’s headquarters in the Orhideea Towers in Bucharest, Romania, photographed in February 2023. Credit: ChristineBD via Wikimedia Commons, CC BY-SA 4.0 (resized)

Bitdefender 推出了 GravityZone Exposure Management,该工具集漏洞发现、面向互联网的资产扫描、攻击路径绘制和按用户加固于一体。目前已在 Windows 上可用,作为附加组件或独立产品。Bitdefender 未给出价格。

Bitdefender has launched GravityZone Exposure Management, which combines vulnerability discovery, internet-facing asset scanning, attack-path mapping and per-user hardening. It is available now on Windows, as an add-on or standalone. Bitdefender did not give prices.

这家罗马尼亚安全公司周二表示,GravityZone Exposure Management 现已面向 Windows 发布,其他系统将随后跟进。该工具可显示黑客如何将微小弱点串联起来,触达企业最重要的系统。

Bitdefender has launched a tool that shows how hackers could link small weak spots to reach a firm’s most important systems. The Romanian security company said on Tuesday that GravityZone Exposure Management is out now for Windows. Other systems will follow.

该工具可发现工作设备上的未修补软件、错误配置和高风险用户习惯,还会检查企业在互联网上暴露的资产,进而绘制黑客可能采取的路径,让团队看到哪个修复能切断攻击链。

The tool finds unpatched software, bad settings and risky user habits on work devices. It also checks what a firm has left open on the internet. It then draws the routes a hacker could take, so teams can see which fix would block the way.

它还包含 PHASR,这是 Bitdefender 的一款工具,能学习每个人对每台设备的使用方式,随后将 PowerShell 等管理员需要但黑客常滥用的工具,限制在每个用户真正需要的范围内。

It also includes PHASR, a Bitdefender tool that learns how each person uses each device. It then limits tools such as PowerShell, which admins need but hackers abuse, to what each user really needs.

AI 正让弱点更易被发现。微软本月修复了创纪录的 1,400 个缺陷,并表示 AI 发现了更多漏洞。美国银行表示,已引入 1,000 名承包商,修复 Anthropic 的 Mythos 等 AI 模型发现的缺陷。

AI is making weak spots easier to find. Microsoft fixed a record 1,400 flaws this month, and said AI was finding more bugs. Bank of America said it brought in 1,000 contractors to fix flaws found by AI models such as Anthropic’s Mythos.

OpenAI 首席执行官 Sam Altman 本周表示,逐个修复漏洞已无法跟上 AI 驱动的攻击。

OpenAI chief executive Sam Altman said this week that fixing flaws one by one can no longer keep up with AI-driven attacks.

“GravityZone Exposure Management 让精简团队掌控其攻击面,”Bitdefender 业务部门负责人 Andrei Florescu 说。

“GravityZone Exposure Management gives lean teams control of their attack surface,” said Andrei Florescu, who runs Bitdefender’s business unit.

Bitdefender 调查了 1,200 名安全从业者,询问什么阻碍了他们的工作。排名第一的答案(38%)是维护安全规则和例外的工作量。担心影响日常工作紧随其后,占 35.4%。

Bitdefender asked 1,200 security workers what holds them back. The top answer, at 38%, was the work of keeping security rules and exceptions up to date. Fear of breaking day-to-day work came next, at 35.4%.

该工具作为附加组件出售,适用于 Bitdefender 的顶级企业套餐,也可作为独立产品与其他厂商的安全软件搭配使用。Bitdefender 未给出价格。9 月,该公司还推出了面向 AI 代理的 VPN。

The tool is sold as an add-on for Bitdefender’s top business plans, or on its own next to another firm’s security software. Bitdefender did not give prices. In September, it launched a VPN for AI agents.

阅读媒体原文 ↗