EXPLORINEER
en

KR — 전자신문

AI Security Race Shifts from 'Detection' to 'Automated Response'… Market Growth Also Accelerates

Security1 min read

Security companies say AI-powered cyberattacks are pushing the market from simply finding threats to blocking them and responding automatically. Fortinet, Tenable, and F5 all reported this shift in their latest earnings.

The race is moving to automatic response

The competition in the global security market is shifting. Companies used to focus on finding and analyzing threats. Now they want to block attacks in real time and respond on their own. AI helps attackers find weaknesses and attack faster, so slow manual checks and patch-based fixes are no longer enough. Fortinet, Tenable, and F5 all said their customers now need faster, more connected defenses.

Key numbers and facts

  • F5 said a normal patch cycle of 43 days is now a risk.
  • Tenable said customers using its AI agents fix critical security exposures 2 to 3 times more than similar customers.
  • F5 said more than 300 customers have adopted its AI-based web firewall (WAF), which it launched in March.
  • F5's own tests showed its AI-based WAF blocked many attack variations after a PHP vulnerability was disclosed, without new block rules.

Why the gap is growing

When a weakness becomes public, security firms must write and send block rules. During that time, attackers can use the weakness. AI speeds up both finding weaknesses and attacking them, so this window of time keeps shrinking. That is why companies want tools that can act without waiting for a human to write a new rule.

Why it matters

This change could lead to more spending on security. Fortinet said AI is creating new demand, and that this spending wave could be bigger and last longer than the surge during COVID-19, when remote work pushed up security budgets. For companies, security is now a board-level risk, not just an IT task. Buyers increasingly want one platform that gives full visibility and fast automatic response.

What to watch

  • Whether companies actually move their budgets toward platforms and automatic response tools.
  • How well AI-based defenses perform against real attacks outside company tests.
  • Whether the market shifts from separate security products to combined platforms.

Glossary

Fortinet
A company that makes cybersecurity products and platforms for businesses.
Tenable
A company that finds security weaknesses in computer systems and helps fix them.
F5
A company that makes tools for managing and protecting web apps and networks.
WAF
Web application firewall: a security tool that blocks harmful traffic aimed at websites and web apps.

Same story, different eyes

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

Securityheise online

Popcorn Time: Abandoned Update Servers Threatened Mac Users

Security firm Eye Research reports that attackers could have taken over the abandoned update servers of Time4Popcorn, an alternative Popcorn Time client, and run arbitrary code, even with root rights on macOS, on affected Windows, macOS and Android systems. Eye Research instead took over the servers itself and pushed an update that stopped the insecure updater from running. The firm estimates that 250,000 to 350,000 macOS machines were affected, and the details were presented at the hack.lu conference.

SecurityZDNet Korea

Column on Security: The Fall of Human-Centered Cybersecurity

This ZDNet Korea column argues that this autumn's wave of breaches across Korea's financial sector, which the authorities say has hit 16 firms, exposed the limits of human-operated, patch-centered defense. It contrasts these attacks with historical examples such as the Opium War and calls for zero trust, AI-assisted defense, and leadership that measures security by how quickly intrusions are detected and stopped.

SecurityThe Register

Anthropic: That Claude Code extension compromise… couldn't be us

Anthropic denied that a malicious version of its Claude Code extension, published to Cursor's marketplace and reportedly infecting up to 5,000 developers, stemmed from a breach of its own systems. Felix Rieseberg of Anthropic's technical staff said a malicious actor used access to Cursor's marketplace to publish the tampered extension, version 2.1.313, which contained a persistent SSH backdoor and was available for about 11 hours. Cursor said it removed the version, shut down the VSCode Marketplace as a precaution, and has not explained how the package reached the marketplace.

SecurityArs Technica

GM to pay $220 million after selling customer Smart Driver data

General Motors will pay $220 million to settle claims over sharing Smart Driver customer data with brokers, who sold it to insurers, raising some drivers' premiums. The settlement covers the District of Columbia and 35 states whose attorneys general sued GM, and it follows an earlier FTC settlement that bans sharing certain driver data for five years. Under the new terms, a third party will verify GM's compliance with its privacy policy.