Skip to content

Back to the catalog

Securing the unpatchable in an age of AI-driven vulnerabilities
blog.talosintelligence.comarticle

Securing the unpatchable in an age of AI-driven vulnerabilities

Cisco Talos argues that AI-accelerated vulnerability discovery is outpacing organizations' ability to patch, especially for unpatchable operational technology (OT) like medical devices and industrial control systems. It recommends network-level compensating controls instead of patching: upstream next-generation firewalls with intrusion prevention for virtual patching, VLAN/ACL-based micro-segmentation to restrict which devices can reach legacy systems, and visibility into legacy network fingerprints to build an asset inventory. It also debunks the air-gap myth, citing WannaCry's spread through unpatched Windows XP in the NHS as a cautionary example of "hope for the best" failing.

TL;DR Talos lays out virtual patching, micro-segmentation, and visibility as compensating controls for OT systems that can't be patched in the age of AI-driven vulnerability discovery.
Open original ↗

Organisations named here

  • NHS

Technologies named here

  • Windows XP
  • Next-generation firewall
  • Intrusion prevention system
  • Operational Technology systems
  • Unsupported/end-of-life governmental systems
  • VLANs
  • Access Control Lists
  • Data diodes
  • Windows
  • IPS
  • NGFW
  • VLAN

Techniques named here

  • Virtual patching via deep packet inspection
  • Micro-segmentation
  • Network fingerprinting for asset visibility
  • Air gapping

Threat actors named here

  • WannaCry
  • Unspecified threat actors exploiting end-of-life software

Related in Cloud & Infra