人工智能技术正以前所未有的速度生成安全警报，导致企业安全团队应接不暇。在此背景下，Check Point软件科技最新的暴露管理研究报告揭示了一个严峻趋势：环境中存在的关键漏洞数量在过去一年中已翻倍。然而，数据进一步显示，在所有已识别的漏洞中，仅有不到十二分之一（即低于8.3%）被归类为需要立即采取行动的紧急威胁。
这一矛盾现象凸显出现代安全运营面临的深层挑战。一方面，自动化工具与AI的广泛部署大幅提升了漏洞扫描与识别的广度与频率，使得潜在威胁点无所遁形；另一方面，警报的“海啸”也造成了严重的信号过载，导致关键风险可能淹没在大量低优先级或误报信息之中，反而延迟了真正危急漏洞的响应与修复。
研究指出，安全团队亟需从单纯追求警报数量，转向构建更智能的风险优先级排序与响应机制。通过将上下文信息、资产关键性、可利用性及潜在业务影响等因素纳入综合评估，才能从海量数据中精准定位那“少于十二分之一”的真正致命威胁，从而优化资源分配，提升整体安全防护的有效性。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.