行业动态
siliconangle.com ·
@Kristen Nicole
虚拟补丁扩展EDR到ADC,缩小AI漏洞利用窗口
随着自动化扫描器在数小时内武器化新披露漏洞,安全团队转向虚拟补丁,在网络层屏蔽已知漏洞,同时等待正式修复。文章探讨了将EDR扩展到ADC以应对AI时代安全挑战。
AI推荐理由 讨论虚拟补丁在AI安全中的应用,结合F5和CrowdStrike产品,对安全专业人员有参考价值,但内容偏向厂商宣传。
70
正文
更新于美国东部时间2026年9月3日11:34
人工智能
当秒数至关重要:将EDR扩展到ADC以消除AI漏洞利用窗口
作者:克里斯汀·妮可
补丁星期二曾经给防御者带来短暂的优势。现在,由于自动化扫描器能在数小时内将新披露的漏洞武器化,漏洞利用往往在补丁发布之前就出现。这种反转正促使安全团队转向虚拟补丁:在网络层屏蔽已知缺陷,同时测试和部署真正的修复程序。
F5公司首席营销官兼技术联盟负责人约翰·麦迪逊(如图)在该应用交付与安全供应商工作了两年,该公司今年成立30周年。麦迪逊指出,随着漏洞披露与利用之间的差距缩小,F5的客户越来越需要这种保护。
“你现在需要的是AI驱动的安全,能够查看流量、流向、试图访问的内容,并实时生成保护以阻止零日漏洞等,”他说。“我们所说的CDN或WAF中的所有保护都将由AI驱动。它们必须如此。”
麦迪逊在Fal.Con上与theCUBE的戴夫·维兰特和丽贝卡·奈特进行了交谈,这是SiliconANGLE Media的直播工作室theCUBE的独家广播。他们讨论了虚拟补丁如何帮助缩小不断缩小的修复窗口,以及F5与CrowdStrike的合作如何将网络设备视为端点。(*披露见下文。)
F5和CrowdStrike将端点保护扩展到网络层
F5和CrowdStrike将Falcon传感器直接嵌入F5的BIG-IP设备中,这些设备位于网络边界,因此CrowdStrike可以像对待笔记本电脑或云工作负载一样对待这些设备。在两家公司正式化合作之前,已有200多名客户运行该集成,性能开销仅为1%至2%。
“我们测量为1%到2%,他们完全愿意为了增加的安全性而接受这一点,”麦迪逊说。“这始终是安全与网络之间的权衡:高性能与检查所有通过内容。”
紧迫性是可衡量的。CrowdStrike自己的威胁研究发现,AI驱动的对手发起的攻击同比增长89%,平均电子犯罪突破时间降至29分钟,最快记录突破时间为27秒。麦迪逊表示,F5正在将同样的方法应用于一个新问题:AI网关的护栏,包括本周与Salesforce公司的MuleSoft宣布的合作。
“这更多是关于如何处理信息、如何修复,而不是信息本身,”麦迪逊说。“因为每个人都已经拥有信息。”
以下是完整的视频采访,是SiliconANGLE和theCUBE对Fal.Con活动报道的一部分:
(*披露:theCUBE是Fal.Con的付费媒体合作伙伴。CrowdStrike(theCUBE活动报道的赞助商)和其他赞助商对theCUBE或SiliconANGLE的内容没有编辑控制权。)
照片:SiliconANGLE
来自SiliconANGLE联合创始人约翰·弗里尔的消息:
通过参与theCUBE社区来支持我们保持内容开放和免费的使命。加入theCUBE校友信任网络,技术领导者在此联系、分享情报并创造机会。
1500万+ theCUBE视频观众,推动AI、云、网络安全等领域的对话
11.4k+ theCUBE校友——通过独特的基于信任的网络,与超过11,400名塑造未来的技术和商业领导者联系
您是AWS客户吗?通过从我们的市场门户页面和链接购买AWS服务来支持SiliconANGLE:https://siliconangle.com/aws-marketplace/
关于SiliconANGLE Media
SiliconANGLE Media是数字媒体创新的公认领导者,融合突破性技术、战略洞察和实时受众互动。作为SiliconANGLE、theCUBE网络、theCUBE研究、CUBE365、theCUBE AI和theCUBE超级工作室的母公司——在硅谷和纽约证券交易所设有旗舰地点——SiliconANGLE Media运营在媒体、技术和AI的交汇点。
由技术远见者约翰·弗里尔和戴夫·维兰特创立,SiliconANGLE Media建立了一个由行业领先数字媒体品牌组成的动态生态系统,覆盖超过1500万精英技术专业人士。我们新的专有theCUBE AI视频云正在受众互动方面开辟新天地,利用theCUBEai.com神经网络帮助技术公司做出数据驱动决策并保持在行业对话的前沿。
最新故事
OpenAI首席科学家主张放缓AI研究
黑客从Liquid Network窃取3.2亿美元比特币,补丁后归还大部分
高光谱卫星初创公司Pixxel获得1亿美元投资
优步前CEO特拉维斯·卡兰尼克重返机器人出租车竞赛
OpenAI将在代理接管维基后制定错位披露规则
DigiCert世界量子就绪日活动期待什么:加入theCUBE 9月17日
最新故事
OpenAI首席科学家主张放缓AI研究
AI - 作者:玛丽亚·多伊彻。9小时前
黑客从Liquid Network窃取3.2亿美元比特币,补丁后归还大部分
安全 - 作者:玛丽亚·多伊彻。11小时前
高光谱卫星初创公司Pixxel获得1亿美元投资
新兴技术 - 作者:玛丽亚·多伊彻。14小时前
优步前CEO特拉维斯·卡兰尼克重返机器人出租车竞赛
新兴技术 - 作者:迈克·惠特利。1天前
OpenAI将在代理接管维基后制定错位披露规则
AI - 作者:邓肯·莱利。1天前
DigiCert世界量子就绪日活动期待什么:加入theCUBE 9月17日
安全 - 作者:马克·艾伯森。3天前
查看原文(中文正文为 AI 翻译)
UPDATED 11:34 EDT / SEPTEMBER 03 2026
AI
When seconds count: Extending EDR to ADCs to erase the AI exploit window
by Kristen Nicole
Patch Tuesday used to buy defenders a short head start. Now the exploit often lands before the patch does since automated scanners can weaponize a newly disclosed vulnerability within hours. That inversion is pushing security teams toward virtual patching: shielding an application from a known flaw at the network layer while the real fix is tested and rolled out.
John Maddison (pictured), chief marketing officer and head of technology alliances at F5 Inc., has spent two years at the application delivery and security vendor, which turns 30 this year. F5’s customers are increasingly demanding that kind of protection as the gap between vulnerability disclosure and exploitation collapses, Maddison noted.
“What you need now is AI-powered security that can look at the traffic, where it’s going, what it’s trying to get to and produce protection in real time to stop things like zero days,” he said. “All the protections that sit in what we call CDNs or WAFs are going to be AI-powered. They have to be going forward.”
Maddison spoke with theCUBE’s Dave Vellante and Rebecca Knight at Fal.Con, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed how virtual patching can help close shrinking remediation windows and how F5’s partnership with CrowdStrike treats network appliances as endpoints. (* Disclosure below.)
F5 and CrowdStrike extend endpoint protection to the network layer
F5 and CrowdStrike embed the Falcon sensor directly onto F5’s BIG-IP appliances, which sit at the network perimeter, so CrowdStrike can treat that appliances the same way it treats a laptop or cloud workload. More than 200 customers were already running the integration before the companies formalized it, with performance overhead measured at just 1% to 2%.
“We measured it at 1 to 2%, and they’re perfectly willing to deal with that for the security that gets added to it,” Maddison said. “That was always the trade-off between security and networking, high performance versus checking everything that comes through.”
The urgency is measurable. CrowdStrike’s own threat research found that attacks by AI-enabled adversaries rose 89% year over year, with the average eCrime breakout time down to 29 minutes and the fastest recorded breakout at 27 seconds. Maddison said F5 is applying the same approach to a newer problem: guardrails for AI gateways, including a partnership announced this week with Salesforce Inc.’s MuleSoft.
“It’s more around what you do with the information, how you remediate, versus the information itself,” Maddison said. “Because everyone has the information already.”
Here’s the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of the Fal.Con event:
( * Disclosure: TheCUBE is a paid media partner for Fal.Con. Neither CrowdStrike, the sponsor of theCUBE’s event coverage, nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)
Photo: SiliconANGLE
A message from John Furrier, co-founder of SiliconANGLE:
Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.
15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network
Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/
About SiliconANGLE Media
SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.
Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.
LATEST STORIES
OpenAI chief scientist argues for AI research slowdown
Hackers steal $320M in bitcoin from Liquid Network, return most of it after patch
Hyperspectral satellite startup Pixxel nabs $100M investment
Former Uber CEO Travis Kalanick is returning to the robotaxi race
OpenAI to set misalignment disclosure rules after agents took over a wiki
What to expect during DigiCert's World Quantum Readiness Day event: Join theCUBE Sept. 17
LATEST STORIES
OpenAI chief scientist argues for AI research slowdown
AI - BY MARIA DEUTSCHER . 9 HOURS AGO
Hackers steal $320M in bitcoin from Liquid Network, return most of it after patch
SECURITY - BY MARIA DEUTSCHER . 11 HOURS AGO
Hyperspectral satellite startup Pixxel nabs $100M investment
EMERGING TECH - BY MARIA DEUTSCHER . 14 HOURS AGO
Former Uber CEO Travis Kalanick is returning to the robotaxi race
EMERGING TECH - BY MIKE WHEATLEY . 1 DAY AGO
OpenAI to set misalignment disclosure rules after agents took over a wiki
AI - BY DUNCAN RILEY . 1 DAY AGO
What to expect during DigiCert's World Quantum Readiness Day event: Join theCUBE Sept. 17
SECURITY - BY MARK ALBERTSON . 3 DAYS AGO