With the rapid advancements in AI-driven security platforms,such as emerging models like Anthropic Mythos, which are demonstrating significantly faster identification and analysis of vulnerabilities. We are keen to understand how HCL BigFix is evolving in this space.
We are using Bigfix Lifecyle Managment Liscense. Can you please suggest, how is BigFix planning to leverage AI/ML to accelerate vulnerability detection, improve patch prioritization, and reduce the overall time to remediate?
Are there any capabilities being developed around real-time or proactive patch intelligence, risk-based decision-making, or automated remediation workflow keep pace with the increasing speed at which modern threats are identified and need to be resolved?
2 Likes
Relevant: https://zerodayclock.com/
2 Likes
It’s a fair question for HCL on their development and deployment plans….. but really the more critical answer would need to come from the software vendors on how they plan to respond.
3 Likes
There is a lot here to talk about 
so, I'll try to break things down a bit (at least for an initial response).
It's worth mentioning that BigFix is well-positioned to help organizations here even today...the current landscape follows on trends we've been tracking for at least a couple of years now in terms of increasing vulnerability counts every year and shorter and shorter exploitation windows. David, the link you've shared is a good example/reference, thank you! This is one of the reasons why we've developed BigFix CyberFOCUS. Below, I'll briefly touch upon some of the ways that BigFix can help today. But of course, we're not stopping there...we've additional plans, and as always we're of course very interested to learn more from you in this space, and gather feedback to continue to refine our approaches.
How can BigFix help today?
- Significantly reduce both detection as well as remediation times (for when patches are available by vendors)
- BigFix's extensive Fixlet library (600K+ of them!) provides near real-time detection of vulnerabilities and available remediations across a very broad range of OSes, a growing library of 3rd party applciations across Windows, Linux, and macOS, as well as middleware.
- BigFix enables powerful remediation automation with Patch Policies and Fixlet Streams
- Prioritization based on real-world threat contexts with CyberFOCUS
- ex: CISA's Known Exploited Vulnerabilities catalog, as well as vulnerabilities leveraged by Advanced Persistent Threat Groups as tracked by MITRE
- Quickly and easily mitigating zero-days at scale (when patches are not yet available by the vendors)
- Hardening systems with BigFix Compliance against security configurations based on guidelines from CIS, DISA STIGs, and others
We did have a webinar related to this that you may want to check out: LinkedIn Webinar - When AI turns offensive
And I'm sure there will be much more forthcoming here.
If you'd like to discuss in more detail, especially related to potential future plans, please reach out to your TA or Sales contact to coordinate a Roadmap session with our Product Managers.
2 Likes