AI News Feed
Market watch
American Horror Story: 13 to Premiere Sept. 24 on FX, Hulu and Disney+Young Australians Stay in Family Home Longer, Hilda Survey Snapshot ShowsShinyHunters Defaces FBI Jobs Site, Claims 2TB of Employee Data Stolen in PeopleSoft AttackAmazon Cuts Up to 40% Off Hoka, Brooks, Asics and Nike Running Shoes as Marathon Season StartsReport: Next Year’s iPhone Pro Models to Keep Near-Borderless Design, Postpone Two Display TechsImaging Industry Moves From Device Specs to Real-World Scenarios, Shenzhen Conference Says
American Horror Story: 13 to Premiere Sept. 24 on FX, Hulu and Disney+Young Australians Stay in Family Home Longer, Hilda Survey Snapshot ShowsShinyHunters Defaces FBI Jobs Site, Claims 2TB of Employee Data Stolen in PeopleSoft AttackAmazon Cuts Up to 40% Off Hoka, Brooks, Asics and Nike Running Shoes as Marathon Season StartsReport: Next Year’s iPhone Pro Models to Keep Near-Borderless Design, Postpone Two Display TechsImaging Industry Moves From Device Specs to Real-World Scenarios, Shenzhen Conference Says
Cybersecurity

Vicarius launches ScriptAI to write fixes for flaws with no vendor patch

Vicarius Inc. launched ScriptAI, an AI engine that drafts and verifies detection and remediation scripts for vulnerabilities without vendor patches, cutting remediation time from weeks to under an hour, according to SiliconANGLE.

AI News Feed · 2026-09-24 00:06

The company described the problem as a capacity issue rather than a discovery one. It cited Zero Day Clock data, reported by Radware Ltd. this month, showing mean time to exploit stood at negative eight hours as of July, compared with 53 days for defenders in 2024. Vicarius also named Anthropic PBC’s Claude Mythos and Google LLC’s Big Sleep agent as evidence of how quickly machines now surface exploitable code. The fixes still have to be written, the company said.

ScriptAI sits inside Vicarius’s vRx platform. When a vulnerability turns up with no vendor patch behind it, the engine drafts detection and remediation logic. Vicarius researchers check that logic before anything runs. The platform then executes the script and verifies the result on affected machines. Vicarius said the sequence takes under an hour, against weeks for the same work done by hand.

A deterministic judge issues the pass or fail verdict, with no language model in the decision path, the company said. Each validated case ships with a cryptographically signed evidence manifest that customers can verify themselves. Scripts run a pre-check, apply the fix, verify it and roll back on failure, so a breaking change is caught before it reaches production.

“Finding ten times more vulnerabilities is meaningless if remediation still happens through tickets, manual research and weeks of engineering work,” said Roi Cohen, co-founder and chief executive of Vicarius. “If AI can find the vulnerability, AI should help build the protection.”

Vicarius has done a version of this before. Its vuln_GPT model arrived in August 2023, billed as the first trained specifically to write remediation scripts, and its output went out free through the company’s vsociety community. ScriptAI adds the verification step, according to the company.

Everything the engine writes lands in the vScript library under a ScriptAI label. The scripts run as native Bash and PowerShell at the operating system level, with no additional agents or proprietary rule formats.

ScriptAI becomes the fourth path in what Vicarius calls True Remediation. Patching runs through vPatch. When no patch is available, vShield protects the workload, and vScript holds custom and community-sourced remediation scripts. The new service is available to vRx customers starting Sept. 23. Vicarius has built remediation tooling out of New York and Tel Aviv since 2016. Bright Pixel Capital led a $30 million Series B round for the company in January 2024.