en.Wedoany.com Reported - Positive Technologies has launched an attack prediction platform called "Cyber Weather" (Киберпогода), which treats headquarters, subsidiaries, partners, software developers, suppliers, and contractors as a single ecosystem that could be compromised. It analyzes external threats and calculates the potential business impact related to impaired cyber resilience on a daily basis, ultimately generating a plan with practical recommendations for reducing risk levels.
According to the company, attackers are increasingly using "backdoor" methods to infiltrate third parties that have trust relationships with target organizations, rather than directly seeking vulnerabilities in the organization's infrastructure. Based on Positive Technologies' investigation of real incidents at large enterprises, this is the second most common intrusion pathway, used in 28% of cyberattacks. "Cyber Weather" is designed for large enterprises with mature cybersecurity systems and companies with extensive partner networks, aiming to help these organizations monitor and assess the security of their external boundaries.
The platform continuously analyzes external events, such as data breaches or the emergence of public vulnerabilities, and predicts attack scenarios based on new threat data provided by the Positive Technologies Security Expert Center. Unlike traditional methods that only assess the security of external boundaries, the platform monitors from two dimensions simultaneously: first, attacker activity, including discussions on the dark web and Telegram channels, sales of access to the company and its contractors, the appearance of phishing domains, and increases in industry attacks; second, the external exposure surface of the business ecosystem itself—new, changed, or forgotten external entry points, covering resources of subsidiaries and counterparties. All signals are processed by proprietary machine learning models trained on attacker exploit materials, integrating fragmented events into specific potential attack trajectories.
To prioritize risks, "Cyber Weather" relies on unacceptable events predefined by management. Unlike TPRM systems that use scores to assess the quality of external companies, this platform prepares a daily report on possible intrusion scenarios and an action plan to strengthen defenses. Materials are created in a format suitable for management discussion, avoiding technical details that might hinder understanding, thereby accelerating decision-making and enabling more effective budgeting for cybersecurity investments. Notifications for events requiring immediate response are sent instantly, with a separate panel provided for information security experts to display more detailed risk data.
According to the company's estimates, the market for solutions aimed at reducing attacks through affiliated companies and counterparties in Russia will reach 5.5 to 6.6 billion rubles within three years. This market is currently in its early formation stage, covering medium and large enterprises in industries such as industry, energy, oil and gas, finance, retail, transportation, telecommunications, IT (including government orders), and pharmaceuticals. The calculation also considers organizations' willingness and ability to procure cyber risk assessment solutions at the board level. Positive Technologies plans to capture at least 12% of this market share.
Vadim Solovyov, head of the attack prediction department at Positive Technologies, stated that the product overturns traditional attack prediction methods. It can be used to assess attackers' level of interest in a company, the protection level of related organizations, and the goals that could be achieved through attacks, thereby identifying priority risks among numerous threats and taking the most reasonable measures to prevent unacceptable events related to external attack vectors.
This article is compiled by Wedoany. All AI citations must indicate the source as "Wedoany". If there is any infringement or other issues, please notify us promptly, and we will modify or delete it accordingly. Email: news@wedoany.com
