Key points
- Criminal IP introduces AITEM as an evolution of traditional attack surface management capabilities.
- The new approach uses artificial intelligence to connect asset discovery with investigation and response.
- The vendor argues that visibility alone is insufficient for addressing modern cyber threats effectively.
Criminal IP has launched a new artificial intelligence-powered framework called AITEM, designed to improve how organisations manage their external attack surfaces. According to BleepingComputer, the tool aims to bridge the gap between simply discovering exposed assets and actively responding to associated risks.
Traditional attack surface management tools primarily focus on helping organisations discover exposed assets within their digital environment. However, Criminal IP states that this visibility alone is not enough to address threats effectively in today’s complex landscape. The company argues that a more integrated approach is necessary for meaningful security improvements.
Context and Background
AITEM represents the next evolution in attack surface management strategies, according to BleepingComputer. The framework connects exposure discovery with critical downstream processes such as investigation, risk prioritisation, and response actions. This holistic model addresses the limitations of tools that only provide data without context or actionable guidance.
By leveraging artificial intelligence, AITEM attempts to streamline the workflow for security operations teams. The system processes discovered exposures and helps analysts understand their potential impact. This allows teams to prioritise which vulnerabilities require immediate attention based on actual risk levels rather than just quantity.
Who Is Affected
Security operations teams responsible for monitoring external assets are the primary audience for this development. Organisations that rely solely on basic discovery tools may find their current processes insufficient for managing complex threat environments. The shift towards AI-powered prioritisation suggests that manual triage of exposures is becoming less viable.
Companies with large digital footprints face greater challenges in managing exposure data. Without automated prioritisation, analysts can become overwhelmed by the volume of discovered assets. AITEM targets these pain points by offering a more efficient path from discovery to remediation planning.
Our take on the response
The introduction of AITEM highlights a growing industry trend towards integrated security platforms. Rather than using separate tools for discovery, analysis, and response, vendors are combining these functions. This consolidation can reduce friction in security workflows and improve response times.
However, the effectiveness of such tools depends on the quality of the underlying data and AI models. Security teams should evaluate how these platforms integrate with existing workflows. The move from passive visibility to active response management requires careful implementation to avoid alert fatigue or missed threats.
What to do and how to stay safe: Criminal IP
- Review current attack surface management tools to assess if they offer integrated response capabilities or only discovery.
- Evaluate how your team prioritises risks from discovered exposures to identify potential bottlenecks in the workflow.
- Monitor vendor announcements for new AI-driven features that may change how exposure data is processed and acted upon.
- Ensure that security operations teams have clear procedures for investigating and responding to prioritised risks once identified.
General security guidance from the Breach Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is AITEM and who developed it?
AITEM is an AI-powered approach to attack surface management developed by Criminal IP, designed to connect discovery with response.
How does AITEM differ from traditional attack surface management?
Traditional tools focus on discovering exposed assets, while AITEM integrates discovery with investigation, risk prioritisation, and response actions.
Why does Criminal IP believe visibility alone is insufficient?
According to BleepingComputer, Criminal IP states that visibility alone is not enough to address threats, necessitating a more comprehensive approach.