←新闻详情

Aaron Levie更新于 10月25日 18:24

Aaron Levie:网络安全智能体的 token 流量或将增长 1000 倍

We’ll likely have 1,000X more tokens flowing through cyber agents soon than we do today.

AI 导读

Box CEO Aaron Levie 预计,不久后流经网络安全智能体的 token 数量将比现在多 1000 倍。他认为,随着攻击面扩大,企业难以跟上新风险的数量,而智能体集群可以调用各类安全工具、测试攻击变体、读取日志并评估企业数据风险。这一能力源于过去几个月长时运行智能体和 computer use 的成熟,以及模型在网络安全领域的深度训练。

引用

Enclave

@EnclaveAI

Node2Shell(CVE-2026-111497)是 Brotli 中的一个内存漏洞,而 Brotli 是被打包进 Node.js、Python、系统库、Envoy 等众多组件中的压缩库。 大多数团队并不清楚 Brotli 在其技术栈中运行的所有位置。它通常是传递依赖或操作系统软件包,而 pip-audit 可能尚未标记出它。 Enclave 的智能体扫描你的代码、云环境和服务器,并准确展示你暴露在何处。 安全公告 + 免费检查:https://t.co/n2WDOnYAj9

查看原文

Node2Shell (CVE-2026-111497) is a memory bug in Brotli, the compression library bundled into Node.js, Python, system libs, Envoy and more. Most teams don't know every place Brotli runs in their stack. It's usually a transitive dependency or an OS package, and pip-audit may not flag it yet. Enclave's agents scan your code, cloud and servers and show you exactly where you're exposed. Advisory + free check: https://t.co/n2WDOnYAj9

查看原帖

正文

We’ll likely have 1,000X more tokens flowing through cyber agents soon than we do today.

As the surface area of cyber risk increases, at some point soon it will be nearly impossible to keep up with the volume of new risks (we’re essentially already there). Large companies barely had the resources to pull this off before, but the vast majority of companies don’t.

There’s a never ending set of libraries to keep up with, tools to leverage, and sprawling infrastructure and code to secure. We’ll have agent swarms that can fan out, leverage any security tool, test various perpetuations of attacks, read through logs, process enterprise data for risk level, and more.

This capability only emerged in the past few months. Wouldn’t have been possible before long running agents and computer use were good enough, and models hadn’t been trained on cyber deeply. That’s all changing now.

This is a huge area of opportunity right now for every layer of the security stack across identity, firewall, network, code scanning, data protection, and more. And it’s at least one reason to be optimistic about the balance of offensive and defensive capability.

来源

Aaron Levie