Aaron Levie:智能体集群用于网络防御将成 AI 最大品类之一
Agent swarms for cyber defense is about to be one of the biggest categories in AI. We are going to have agents reviewing our code and infra, testing every permu
Box CEO Aaron Levie 认为,用于网络防御的智能体集群即将成为 AI 领域最大的品类之一。他判断安全是智能体集群最合适的用例,因为这一领域算力投入越多产出价值越高,大量人工难以覆盖或来不及完成的测试可以由智能体承担。他引用的 Enclave 公告称,攻击者已在用廉价 AI 智能体集群全天候探测弱点。
查看原帖重大消息:Enclave 现已向所有人开放,今天我们同时推出 Threat Feed。 Enclave 是面向 AI 原生公司的自主安全团队:一支由安全智能体组成的队伍,以攻击者的方式测试你的代码、云和基础设施。我们构建它基于一个简单的信念。攻击者已经在使用大量廉价的 AI 智能体全天候探测弱点,因此防御方也需要自己的智能体才能跟上。一个没有安全职能的小团队,也应该能够像大团队一样进行防御。 Threat Feed 是最新的一部分:一个实时推送新漏洞的信息流,并对照你的技术栈进行检查,这样当下一次重大漏洞披露出现时,你就能知道它是否影响你。本周就证明了这一点。周三,PHP2Shell、LiteLLM 和 Railway 都披露了安全问题。PHP2Shell 在 PHP 的代码中潜伏了十多年,直到一位使用前沿 AI 的研究人员在大约一周内将其变成了可用的漏洞利用。Cloudflare 在披露前的 10 小时内看到了数千次漏洞利用尝试,此后已看到数百万次。 从今天开始,任何人都可以注册。 免费试用 14 天:https://t.co/KEjswP2ZMh
查看原文
Big news: Enclave is now open to everyone, and today we're launching Threat Feed. Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. Attackers already use swarms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one. Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since. Starting today, anyone can sign up. Try it free for 14 days: https://t.co/KEjswP2ZMh
正文
Agent swarms for cyber defense is about to be one of the biggest categories in AI. We are going to have agents reviewing our code and infra, testing every permutation of risk, processing gobs of data, and more.
Security is one of the best use-cases for swarms because it’s an obvious area where more compute in equals more value out. There’s a wide range of testing that people can never get around to - or at least quickly enough - that agents have no problem going after.
Going to be a wild time in cyber.