EXPLORINEER
en

KR — 전자신문

[AI Against AI] Piolink: From AI-Driven Vulnerability Verification to Blocking Hacks

Security2 min read

Piolink, a Korean security company, has launched a multi-layer defense plan to stop attacks that use AI to automate hacking. The plan combines a risk-finding platform called BlueHunter, a web firewall called WebFront-K, and 24-hour security monitoring.

What happened

Hackers now use AI to automate almost every step of an attack. This includes finding weak spots, planning attack routes, and trying to break in. Piolink says defenders need a new approach. It proposes three layers: finding real risks early, blocking attacks in real time, and watching for attacks around the clock.

Key numbers and facts

  • Piolink's Threat Analysis Center used BlueHunter to find 28 unknown (zero-day) weak spots.
  • These weak spots were found in 10 Linux open-source services and 1 content management system (CMS).
  • 2 of the 28 weak spots have been given CVE numbers, a standard ID for security flaws. They are set to be made public in December.

How the system works

BlueHunter is an AI-based platform that checks which weak spots attackers can actually use. Its Blue Mode constantly scans systems that face the internet and ranks risks. Its Red Mode lets AI design attack scenarios and test them in a limited, controlled way. The test results feed back into the risk ranking. The platform also weighs scores, whether a system is exposed online, known attacks, and threat intelligence. People make the final decisions. WebFront-K checks web traffic for signs of AI bots, hidden malicious code, and too many repeated requests. Piolink also released a defense signature for 'Artecs,' an AI penetration testing tool linked to a recent financial sector breach.

Why it matters

Companies can find thousands of weak spots, but they cannot fix them all at once. A high severity score does not always mean the greatest danger. A flaw on a public server with published attack code may be more urgent than a severe flaw on a server no one can reach. Piolink's idea is to help security teams shift from managing long lists of flaws to dealing with real threats. The article also notes that a firewall alone is not enough. Attacks that look like normal use, such as abusing business logic, also need controls like multi-factor login and account lockout rules.

What to watch

  • Whether the 2 CVE-numbered flaws are published in December as planned.
  • How well BlueHunter's risk ranking works for real companies outside tests.
  • Whether the Artecs defense signature and credential-stuffing protections stop real attacks.

Glossary

BlueHunter
Piolink's AI platform that finds and ranks the real attack risks in a company's systems.
WebFront-K
Piolink's web firewall that spots and blocks automated AI attacks on websites.
CVE
A standard ID number given to a publicly known security flaw.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

Security전자신문

[AI Guarding AI] Microsoft Extends Project Perception to Protect Internal AI Agents, Not Just External Threats

Microsoft says AI security must now cover internal AI agents that access enterprise data, tools, and systems, not only external AI-powered attacks. Its Project Perception, unveiled in July, combines signals, security context, models, and specialized Red, Blue, and Green agents into a continuously learning defense system, with humans retaining final control over key decisions. The company also describes "agentic insiders," offers layered protection and dynamic risk scoring, and provides traceability so security teams can monitor agent behavior and adjust policies.

SecurityITmedia

GMO Confirms Attacker Published Information; Investigating Whether Customer Data Is Included, Considering Additional Condolence Payments

GMO Internet Group said that at 12:30 p.m. on October 27 it confirmed the publication, apparently by an attacker, of information that appears to concern customers, related to unauthorized access to its FX auto-trading VPS "Onamae.com Desktop Cloud." The company is still investigating the contents, which may include inaccurate information, and is considering additional condolence payments for affected users whose information was published, beyond the flat 5,000-yen payment announced earlier.

SecurityITmedia

Times Car Asks How the ¥3,000 Apology Payment Was Calculated; Park24 Responds

Park24, the operator of the car-sharing service Times Car, told ITmedia NEWS on October 27 that the ¥3,000-equivalent apology payment to affected users was set by comprehensively weighing the response options available to users and the burdens involved, though it declined to disclose the specific calculation basis. The company said the payment will be made as cash or vouchers, but the form and payment timing are still under consideration, and details will be announced once decided. The payment covers 1,464,349... (see note) affected records, and the company expects to book a ¥5.5 billion special loss for the payment and related response costs.

SecurityITmedia

GMO to Provide New PCs to Customers Hit by Ransomware; Criminal Group Reportedly Publishes One Customer's Data

GMO Internet Group announced it will provide replacement PCs with equivalent performance to customers whose PCs were hit by ransomware through unauthorized access to "お名前.com デスクトップクラウド." The company said that as of 11:59 a.m. on October 27, no ransomware or other malware had been confirmed on devices already collected and analyzed, while the criminal group published what it claimed was one customer's personal information, which GMO said may contain inaccurate content and urged people not to access or spread it.