字号·· | 护眼
thenextweb

CrowdStrike同意收购AI安全初创公司Fiddler和DreadnodeCrowdStrike agrees to buy AI security startups Fiddler and Dreadnode

点「原文对照」整页切到原文,或双击某段只看那段的原文。

乔治·库尔茨,CrowdStrike首席执行官兼创始人。图片来源:乔治·库尔茨 / CC BY-SA 4.0,经由维基共享资源(裁剪)George Kurtz, chief executive and founder of CrowdStrike. Credit: George Kurtz / CC BY-SA 4.0 via Wikimedia Commons (cropped)

CrowdStrike 已同意收购两家 AI 安全公司 Fiddler AI 和 Dreadnode。该公司周二在巴塞罗那举行的 Fal.Con Europe 大会上同时宣布了这两笔交易。Fiddler 负责追踪 AI 智能体的行为及其背后的原因。Dreadnode 则在 AI 模型、应用和智能体上线前,对其进行弱点测试。

CrowdStrike has agreed to buy two AI security companies, Fiddler AI and Dreadnode. It announced both on Tuesday at its Fal. Con Europe conference in Barcelona. Fiddler tracks what AI agents do and why. Dreadnode tests AI models, applications and agents for weaknesses before they go live.

CrowdStrike 未披露交易价格。根据 Fiddler 和 Dreadnode 的公告,CrowdStrike 计划主要以现金支付,外加一些附带归属条件的股票。预计两笔交易将在 CrowdStrike 2027 财年第四季度完成,惯例成交条件除外。

CrowdStrike did not disclose the prices. It plans to pay mostly in cash, plus some stock with vesting conditions, according to the Fiddler and Dreadnode announcements. Both deals are expected to close in CrowdStrike’s fourth quarter of fiscal 2027, subject to customary closing conditions.

“当监管机构或你的董事会询问智能体做了什么时,回答‘是模型做的’并不是一个答案,”CrowdStrike 首席执行官兼创始人 George Kurtz 表示。“Fiddler 是每个智能体的‘飞行记录器’:它提供可观测性,能准确解释智能体到底做了什么,以及为什么这么做。”

“When a regulator or your board asks what an agent did, saying ‘the model did it’ is not an answer,” said George Kurtz, CrowdStrike’s chief executive and founder. “Fiddler is the flight recorder for every agent: the observability to explain exactly what an agent did and why.”A flight recorder for agents CrowdStrike will sell Fiddler as Falcon Observe, part of its Falcon platform. It is due in the fourth quarter of fiscal 2027. CrowdStrike says it will let companies see what every agent did and why, and prove it stayed within its task. Fiddler’s purpose-built models can cut evaluation costs by up to 98%, according to the company.

智能体的“飞行记录器” CrowdStrike 将把 Fiddler 作为 Falcon Observe 出售,纳入其 Falcon 平台。预计将于 2027 财年第四季度推出。CrowdStrike 称,这将让企业看到每个智能体做了什么、为什么这么做,并证明其始终在既定任务范围内运行。据该公司介绍,Fiddler 专门构建的模型可将评估成本降低高达 98%。

“We started Fiddler to help enterprises answer a fundamental question: can I trust what my AI agents are doing?” said Krishna Gade, Fiddler’s chief executive and co-founder.

“我们创立 Fiddler 的初衷,是帮助企业回答一个根本问题:我能信任我的 AI 智能体在做什么吗?”Fiddler 首席执行官兼联合创始人 Krishna Gade 表示。

Attacking AI before attackers do Dreadnode runs more than 100 known AI attack strategies, including jailbreaks and prompt injection. It targets models, agent reasoning loops, applications and MCP servers. It maps what it finds to frameworks such as the OWASP Top 10 for large language models, MITRE ATLAS and NIST’s AI Risk Management Framework. Its team will join CrowdStrike’s Cyber Superintelligence Lab. The testing product is due in the same quarter as Falcon Observe.

在攻击者之前攻击 AI Dreadnode 运行超过 100 种已知的 AI 攻击策略,包括越狱和提示词注入。其测试对象涵盖模型、智能体推理循环、应用和 MCP 服务器。它将发现的问题映射到大语言模型 OWASP Top 10、MITRE ATLAS 和 NIST AI 风险管理框架等标准框架。其团队将加入 CrowdStrike 的“网络超级智能实验室”。该测试产品预计将在与 Falcon Observe 同一季度推出。

“AI fails in ways traditional testing was never designed to catch, and the people best equipped to find those failures think like attackers,” said Brad Palm, Dreadnode’s chief executive.

“人工智能在传统测试从未设计捕捉的方式上失败,而最能发现这些失败的人则像攻击者一样思考,”Dreadnode 首席执行官布拉德·帕尔姆说。

A kill switch, available now CrowdStrike also launched an AI Kill Switch in Falcon Guardian, its AI security product. If an agent goes rogue, a defender can stop it where it runs and block it from launching again. The switch also cuts the agent’s access to the company network. An authorised administrator triggers it, and every action is logged. The release says the sensor stops agents at the gateway first, and “soon” on the endpoint. Unlike the two acquisitions, the switch is available today.

CrowdStrike 现在已推出 AI 死亡开关,并在其 AI 安全产品 Falcon Guardian 中提供。若代理程序失控,防御者可以在其运行位置停止它,并阻止其再次启动。该开关还会切断代理程序对公司网络的访问。授权管理员触发后,所有操作都会被记录。发布说明称,传感器首先在网关处停止代理程序,随后“很快”在终端上停止。与两项收购不同,该开关今天已可使用。

“If one goes off course, the AI Kill Switch gives our security team the final say,” said Rick Orloff, chief information security officer at Everpure, a CrowdStrike customer.

“如果有一个失控,AI 死亡开关让我们的安全团队拥有最终决定权,”CrowdStrike 客户 Everpure 的首席信息安全官里克·奥尔洛夫说。

On the same day, CrowdStrike said it is bringing Falcon Guardian inside Anthropic’s Claude Cowork. The Falcon sensor runs inside the virtual machine where Cowork’s agents execute code. The integration is in beta on macOS, with Windows support expected later in November, CrowdStrike wrote in a blog post.

同日,CrowdStrike 表示将 Falcon Guardian 带入 Anthropic 的 Claude Cowork。Falcon 传感器在 Cowork 代理程序执行代码的虚拟机内运行。该集成已在 macOS 上进入测试阶段,Windows 支持预计将在十一月晚些时候推出,CrowdStrike 在博客中写道。巴塞罗那的忙碌一周周一,会议的第一天,CrowdStrike 宣布与戴尔在其 AI 工厂与 Nvidia 合作的安全协议,并与 Dynatrace 和 CoreWeave 签订协议。

A busy week in Barcelona On Monday, the first day of the conference, CrowdStrike announced security deals with Dell for its AI Factory with Nvidia, and with Dynatrace and CoreWeave. It also said 15 partners, including BT, Deutsche Telekom Security, Orange Cyberdefense and Telefónica, had joined Project QuiltWorks as it expands across Europe.

它还表示,15 家合作伙伴,包括 BT、德国电信安全、Orange Cyberdefense 和 Telefónica,已加入 Project QuiltWorks,随着该项目在欧洲的扩展。该计划使用前沿 AI 模型帮助客户发现并修复安全风险。

The programme uses frontier AI models to help customers find and fix security risks.

九月,CrowdStrike 将 OpenAI 纳入产品,并推出多代理调查。十月,它将韩国银行泄露事件与 AI 工具联系起来。会议将于周三结束。

In September, CrowdStrike put OpenAI in the product and launched multi-agent investigations. In October, it linked South Korean bank breaches to AI tools. The conference ends on Wednesday.

阅读媒体原文 ↗