Abstract: A system and method for initiating a remediation action based on an End-Of-Life (EOL) date of a software component deployed in a cloud computing environment is presented. The method includes inspecting resources of a cloud computing environment for a plurality of software components, each software component deployed on at least a resource; detecting software components from the inspection of resources deployed in the cloud computing environment; generating a software bill of materials (SBOM) for the cloud computing environment based at least on a detected software component, wherein the SBOM includes an identifier of the software component; determining for the detected software component an end of life (EOL) date, wherein the EOL date is determined based on vendor data; applying a policy including a conditional rule to the EOL date; and initiating a remediation action for the detected software in response to determining that the conditional rule is satisfied.

Abstract: A system and method for initiating a remediation action based on an End-Of-Life (EOL) date of a software component deployed in a cloud computing environment is presented. The method includes inspecting resources of a cloud computing environment for a plurality of software components, each software component deployed on at least a resource; detecting software components from the inspection of resources deployed in the cloud computing environment; generating a software bill of materials (SBOM) for the cloud computing environment based at least on a detected software component, wherein the SBOM includes an identifier of the software component; determining for the detected software component an end of life (EOL) date, wherein the EOL date is determined based on vendor data; applying a policy including a conditional rule to the EOL date; and initiating a remediation action for the detected software in response to determining that the conditional rule is satisfied.

Abstract: A system and method for detecting a combined cybersecurity risk for an artificial intelligence (AI) model is presented. The method includes: inspecting a computing environment for an AI model deployed therein; generating a representation of the AI model in a security database, the security database including a representation of the computing environment; detecting a first cybersecurity risk respective of the AI model; inspecting the computing environment for a cybersecurity object; determining that the AI model is exposed to a toxic combination cybersecurity risk based on the detected first cybersecurity risk and the cybersecurity object; and initiating a mitigation action based on the toxic combination cybersecurity risk.

Abstract: A system and method for detecting a combined cybersecurity risk for an artificial intelligence (AI) model is presented. The method includes: inspecting a computing environment for an AI model deployed therein; generating a representation of the AI model in a security database, the security database including a representation of the computing environment; detecting a first cybersecurity risk respective of the AI model; inspecting the computing environment for a cybersecurity object; determining that the AI model is exposed to a toxic combination cybersecurity risk based on the detected first cybersecurity risk and the cybersecurity object; and initiating a mitigation action based on the toxic combination cybersecurity risk.

Abstract: A system and method for detecting a combined cybersecurity risk for an artificial intelligence (AI) model is presented. The method includes: inspecting a computing environment for an AI model deployed therein; generating a representation of the AI model in a security database, the security database including a representation of the computing environment; detecting a first cybersecurity risk respective of the AI model; inspecting the computing environment for a cybersecurity object; determining that the AI model is exposed to a toxic combination cybersecurity risk based on the detected first cybersecurity risk and the cybersecurity object; and initiating a mitigation action based on the toxic combination cybersecurity risk.