Securing the unpatchable in an age of AI-driven vulnerabilities
Cisco Talos argues AI-driven vulnerability discovery leaves unpatchable OT systems exposed, recommending virtual patching via NGFW/IPS and micro-segmentation.
AI-assisted code analysis is uncovering vulnerabilities faster than organizations can patch, leaving certified or end-of-life OT systems with unmitigated known flaws. Talos recommends virtual patching with next-generation firewalls and IPS, micro-segmentation using VLANs and ACLs, and building visibility-based inventories of legacy systems. The article cites WannaCry's impact on the NHS and 2023 exploitation of end-of-life software in government systems, and warns that air gaps and data diodes are routinely circumvented by operational shortcuts.
- AI is accelerating vulnerability discovery, leaving certified or end-of-life OT systems with unpatchable known flaws.
- Recommends NGFW/IPS upstream for virtual patching and micro-segmentation via VLANs and ACLs to limit exposure.
- Cites WannaCry's NHS impact and 2023 exploitation of end-of-life software in government systems.
- Warns air gaps and data diodes are routinely circumvented by operational shortcuts.
- Vendors
- Cisco Talos
- Organizations
- Cisco TalosNHS
From the original article
3 min read at blog.talosintelligence.com
Advances in AI technology will continue to identify vulnerabilities that in some circumstances are difficult, or effectively impossible, to patch. Appropriate network segmentation, rigorous visibility, and the deployment of NGFW/IPS combinations can provide a powerful compensatory layer.
By Martin Lee · blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.