Generative systems and methods for adaptive vulnerability management

A vulnerability management system comprising:

• at least one hardware processor;
• and
• at least one non-transitory memory storing instructions, which, when executed by the at least one hardware processor, cause the vulnerability management system to:
• collect vulnerability information over a network from a publishing source,
• wherein the vulnerability information includes common vulnerabilities and exposures (CVEs) published on a public repository, and
• wherein the CVEs include a known vulnerability for a particular type of network asset;
• collect network asset information of a communications network, the communications network being subject to the vulnerability management system,
• wherein the network asset information includes information about multiple types of network assets deployed in the communications network;
• generate, using a generative artificial intelligence (AI) system, based on an input including the collected vulnerability information and the collected network asset information, a self-executing scanner agent configured to automatically scan the communications network for the known vulnerability;
• deploy the scanner agent at any network assets of the communications network that match the particular type of network asset indicated in the collected vulnerability information;
• in response to the scanner agent executing and detecting the known vulnerability in a particular network asset of the communications network, generate a record including an indication of the particular network asset in association with the known vulnerability;
• and
• store the record in a data repository that aggregates records of detected known vulnerabilities in association with network assets of the communications network.

At least one non-transitory, computer-readable storage medium carrying instructions, which, when executed by a vulnerability management system, cause the vulnerability management system to perform operations for identifying a vulnerability of a computer asset, the operations comprising:

• collecting vulnerability information over a network from a publishing source,
• wherein the vulnerability information includes common vulnerabilities and exposures (CVEs) published on a public repository, and
• wherein the CVEs include a known vulnerability for a particular type of network asset;
• collecting network asset information of a communications network, the communications network being subject to the vulnerability management system,
• wherein the network asset information includes information about multiple types of network assets deployed in the communications network;
• generating, using a generative artificial intelligence (AI) system, based on an input including the collected vulnerability information and the collected network asset information, a self-executing scanner agent configured to automatically scan the communications network for the known vulnerability;
• deploying the scanner agent at any network assets of the communications network that match the particular type of network asset indicated in the collected vulnerability information;
• in response to the scanner agent executing and detecting the known vulnerability in a particular network asset of the communications network, generating a record including an indication of the particular network asset in association with the known vulnerability;
• and
• storing the record in a data repository that aggregates records of detected known vulnerabilities in association with network assets of the communications network.