Palo Alto Networks Menggandeng Anthropic, OpenAI, dan Vendor OT untuk Pertahanan Infrastruktur Kritis

Pada 19 Agustus 2026, Palo Alto Networks meluncurkan Frontier AI Critical Defense Program, sebuah upaya koordinasi yang menggabungkan laboratorium AI, pembuat perangkat lunak, dan vendor teknologi operasional untuk melindungi infrastruktur kritis dari kerentanan yang kini model AI temukan lebih cepat daripada operator dapat memperbaikinya. Peserta baru meliputi Anthropic, OpenAI, vendor OT Mitsubishi Electric dan Axis Communications, kelompok berbagi risiko kesehatan dan keuangan Health-ISAC serta Analysis and Resilience Center for Systemic Risk, lembaga nirlaba riset energi EPRI, dan Akrites, inisiatif Linux Foundation.

The program rests on a mismatch the company has been documenting in its own research. Two weeks earlier, its Unit 42 division disclosed that an autonomous discovery system it built, called NOVA, had found 14,090 kerentanan terkonfirmasi di 3,915 proyek sumber terbuka in a two-month run, 99.4% of them previously unreported. Nearly 40% scored high or critical severity. Operators of power grids, factory floors and hospital equipment, bound by uptime requirements and safety validation, cannot deploy software fixes at anything close to that pace.

The program’s answer is virtual patching: network-level protections, deployed through Palo Alto Networks’ Advanced Threat Prevention service on its firewalls and SASE products, that block exploit traffic before it reaches a vulnerable system. The goal is to buy time between a vulnerability’s discovery and the day a tested patch can safely go into production.

“In the age of Frontier AI, the traditional, reactive race to build and deploy software patches before adversaries exploit a flaw is a losing battle,” said Lee Klarich, the company’s chief product officer, in the pengumuman. “Protecting critical infrastructure requires a structural shift from isolated patching to collective, proactive intelligence.”

How the Coordination Works

The program page describes three pillars. Collaborators exchange sensitive vulnerability information inside what the company calls a secure, embargoed network. Palo Alto Networks then converts that intelligence, along with findings from its own AI-driven research, into network-level protections it describes as “air cover” while customers work through their patch cycles. In return, participating vendors receive anonymized telemetry on in-the-wild exploitation attempts against their products, a feedback loop meant to show them how their code is being targeted.

One design detail matters given who is at the table: the company says its Frontier Virtual Patching system safeguards sensitive vulnerability details from attackers while pushing protections out, an obvious concern when the same frontier models being enrolled as defenders are also the engines making mass vulnerability discovery cheap.

The Program Builds on Months of Prior Deals

The August 19 expansion extends a structure Palo Alto Networks has been assembling through 2026. On 24 Juni 2026, it announced that IBM and Red Hat would fold the company’s virtual patching into Project Lightwell, their $5 billion open-source security commitment, under a “shield-and-fix” workflow where network protections go up the same day a flaw is found while remediation proceeds upstream. Microsoft participates through MAPP, its longstanding active protections program, and the company already runs OT threat research with Siemens and Idaho National Laboratory.

The direction of travel is consistent across the industry. Anthropic has been recruiting security firms into its Glasswing vulnerability-hunting initiative, yang bergabung dengan Horizon3.ai pada Juli 2026, and OpenAI has been expanding its Daybreak cyber defense models, baru-baru ini ke Amazon Bedrock. The FBI has separately warned that it memperkirakan bahwa musuh akan mengarahkan Frontier AI pada bug perangkat lunak, the same scenario Unit 42’s NOVA results demonstrate is already technically feasible.

The Exposure Gap, by the Numbers

• 14,090 kerentanan terkonfirmasi yang ditemukan oleh NOVA dalam dua bulan, 99.4% di antaranya belum pernah dilaporkan sebelumnya
• 3,915 proyek sumber terbuka yang dipindai di enam ekosistem bahasa
• 39.7% temuan dinilai memiliki tingkat keparahan tinggi atau kritis menurut CVSS 4.0
• 55 hari: rata‑rata industri untuk menerapkan patch tradisional, yang menurut perusahaan virtual patchingnya menyusut menjadi “jendela paparan hampir nol”
• 5,421 temuan rantai pasokan, termasuk 2,776 eksposur hilir yang divalidasi dengan exploit bukti‑konsep yang berfungsi

Apakah program ini mengubah perhitungan defender tergantung pada adopsi oleh vendor yang produknya berada di dalam lingkungan kritis. Partisipasi dua laboratorium Frontier AI terkemuka sudah cukup signifikan: keduanya kini menyediakan kemampuan pertahanan kepada vendor keamanan sekaligus model mereka mendorong lonjakan penemuan yang membuat program ini diperlukan. Palo Alto Networks sedang menerima aplikasi kolaborator melalui halaman program, dan menyatakan bahwa perlindungan sudah mulai diberikan kepada pelanggan bersama.