[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuMi6HkkEMB7mEhZU6kZ_-DxCPiGcmwo7bux-cafveSc":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"f50e16bb-56a4-423b-a7a6-5cc510872b56","AI Is Making Software Cheaper to Attack. Defenders Need to Change the Price","ai-is-making-software-cheaper-to-attack-defenders-need-to-change-the-price-5089cb","By Ansgar Dodt, VP Product Management for Software Monetization at Thales Not every piece of software is worth attacking. Traditionally, that has offered software vendors a degree of protection. Reverse engineering takes time, specialist expertise and persistence, forcing attackers to weigh the potential reward against the effort involved. However, AI is beginning to change that […] The post AI Is Making Software Cheaper to Attack. Defenders Need to Change the Price appeared first on IT Security Guru.","Artificial intelligence is making software cheaper and easier for attackers to reverse engineer. This trend reduces the effort required to identify and exploit vulnerabilities, potentially making previously ignored software targets more attractive. Defenders need to adapt by focusing on application protection alongside traditional patching to make weaknesses harder to discover and exploit.","AI is lowering the barrier for attackers to reverse engineer software, increasing the attack surface.","https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F09\u002F30\u002Fai-is-making-software-cheaper-to-attack-defenders-need-to-change-the-price\u002F?utm_source=rss&utm_medium=rss&utm_campaign=ai-is-making-software-cheaper-to-attack-defenders-need-to-change-the-price","https:\u002F\u002Fwww.itsecurityguru.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FFOR-EDITING-3.png","2026-09-30T11:24:42+00:00","2026-09-30T12:00:23.246496+00:00",7,[17,20],{"name":18,"type":19},"Thales","vendor",{"name":21,"type":22},"AI","technology","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":23,"icon":25,"name":26,"slug":27},null,"Threat Intelligence","threat-intelligence",[29,34,39,44],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":40},{"id":41,"icon":25,"name":42,"slug":43},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":45},{"id":23,"icon":25,"name":26,"slug":27},[],[18],{"controls":49,"vendors":134},[50,79,105],{"slug":51,"name":52,"problem":53,"products":54},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":80,"name":81,"problem":82,"products":83},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",[84,92,97],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","allowlisting","Allowlisting","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fallowlisting","Blocks any software that has not been approved, including ransomware and unapproved remote-access tools. A learning period builds the approved list first.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":93,"product_name":94,"url":95,"description":96},"ringfencing","Ringfencing","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fringfencing","Limits what approved applications may do, such as which files, network locations and other programs they can reach, so a compromised application cannot be turned against you.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","app-control-for-business","App Control for Business","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fapp-control-for-business\u002F","Application control built into Windows, formerly Windows Defender Application Control, with AppLocker as the older option. Policies can be managed through Intune.",{"slug":106,"name":107,"problem":108,"products":109},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",[],{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":148},"ai-lowers-the-bar-for-attackers-defenders-must-raise-the-cost-of-exploitation","AI Lowers the Bar for Attackers — Defenders Must Raise the Cost of Exploitation","Artificial intelligence is dramatically reducing the time and skill required for attackers to reverse engineer software and identify exploitable vulnerabilities, meaning that previously unattractive or obscure targets are now within reach of a much wider threat actor pool. Traditional patch management alone is no longer sufficient, as AI-assisted attackers can identify and weaponize new vulnerabilities faster than most organizations can respond. Organizations must shift toward a layered application protection strategy — including obfuscation, runtime protection, and hardening — to increase the effort and cost required for successful exploitation. This matters because the asymmetry between attack and defense is widening: if defenders do not actively make vulnerabilities harder to discover, the window of exposure becomes dangerously large even for well-patched environments.",[140,141,142,143,144,145,146,147],"CIS Control 7: Continuous Vulnerability Management","CIS Control 16: Application Software Security","NIST SP 800-53 SA-11: Developer Testing and Evaluation","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST Cybersecurity Framework DE.CM-8: Vulnerability Scans","OWASP Software Assurance Maturity Model (SAMM) — Threat Assessment","NIST SP 800-218: Secure Software Development Framework (SSDF) PW.6",{}]