#United States #New York #AI-generated exploits #Anyday Security #ExploitTotal.ai

Anyday Security Introduces ExploitTotal.ai

In a bold move to enhance cybersecurity defenses, Anyday Security, a start-up dedicated to combating AI-powered adversaries, has launched ExploitTotal.ai. This innovative platform offers security professionals immediate access to AI-generated exploits, allowing them to create effective protections against vulnerabilities within minutes of a patch release. This initiative comes at a critical juncture for cybersecurity, given the rapid pace at which AI is transforming threat landscapes.

As vulnerabilities emerge, so does the capability of malicious actors to exploit them with unprecedented efficiency. According to recent reports from Anthropic, AI models can now construct working exploits within just an hour of a patch's release. The implications of this rapid exploitation can be devastating—especially as attackers increasingly manage to deploy such techniques before organizations have an opportunity to respond. Notably, the PHP2Shell breach illustrates just how swiftly cybercriminals can act, making it crucial for security teams to adopt real-time strategies.

With ExploitTotal.ai, Anyday Security provides organizations with over 200 validated AI-generated exploits already available on the platform. Remarkably, more than 70% of these relate to vulnerabilities that have not previously had publicly available proof of concept (PoC) exploits. This empowers defenders not just to anticipate attacks based on past exploitation patterns, but to actively test their systems against known vulnerabilities with immediate, actionable insights.

Yonatan Gorfung, CEO of Anyday Security, highlights the platform as a game-changer in cybersecurity: "AI has collapsed the distance between a vulnerability and an exploit. For 20 years, the absence of a public exploit typically implied that one did not exist. Today, it merely means it hasn't been publicly documented yet. By democratizing the ability to generate exploits, we're leveling the playing field for defenders against swift-moving attackers."

As part of its continuous commitment to innovation, Anyday Security utilizes the same models attackers employ, thus mirroring the conditions that cybercriminals face. The company capitalizes on GLM-5.3, labeled by the U.S. Center for AI Standards and Innovation as one of the most capable models, to produce exploits simply based on the publicly available details surrounding a vulnerability and its corresponding patch. By mapping these exploits to databases like the U.S. National Vulnerability Database and CISA’s exploited vulnerabilities catalog, they found that 72% of their exploits had no prior public demonstration. This statistic demonstrates not only the growing capabilities of AI in cybersecurity but also the urgent need for defenders to adapt accordingly.

Security teams often grapple with thousands of known vulnerabilities, but having a comprehensive understanding of attacks through active testing is critical. Gorfung underscores, "Our system generates exploits on the same day that solutions are released, allowing teams to evaluate their defenses and put detection rules in place before breaches occur. The attackers are always ahead of the game—the aim of ExploitTotal is to help defenders catch up."

Each vulnerability listed on the ExploitTotal platform includes crucial data such as the feasibility of AI-driven exploitation, the anticipated time and cost to create an exploit, and a performance rating. This rating scale ranges from merely crashing a program to taking complete control over the system, making it easy for defenders to assess the seriousness of the potential threat.

For users seeking in-depth insights, ExploitTotal.ai allows for a comprehensive examination of each exploit's capabilities and the AI model responsible for its creation. While everyone can search the catalog freely, signed-in users gain access to complete assessments and can download harmless PoCs designed for secure testing environments. This ensures that security teams can assess the risks effectively without endangering their systems.

At present, the platform encompasses a wide range of software prevalent in enterprise settings, including Windows, Linux, Chrome, and Firefox. Continuous updates to the catalog ensure it remains relevant to emerging threats and advancements in AI technology.

ExploitTotal.ai is now free for access at exploittotal.ai. As the cybersecurity landscape evolves and adversaries leverage AI for malicious purposes, platforms like ExploitTotal are essential in fortifying defenses and supporting security professionals in their fight against cybercrime.

About Anyday Security

Established by veterans of Israel's military Unit 8200, Yonatan Gorfung and Omri Sibony, Anyday Security is devoted to creating protective measures against AI-driven exploits at scale. Operating from New York, with an R&D center in Tel Aviv, the company is positioned at the forefront of cybersecurity innovation.