Booz Allen’s Vellox brings AI vs. AI defense to protect critical infrastructure and national security

Help Net Security

March 23, 2026 at 7:29 AM

Overview

Booz Allen Hamilton has introduced a new cyber defense suite called Vellox, designed to tackle the increasing threats posed by AI-driven cyberattacks. Their latest threat report, titled 'When Cyberattacks Happen at AI Speed', indicates that the speed of cyberattacks is outpacing response efforts, with the average time for attackers to move from initial access to compromising additional systems dropping to under 30 minutes by 2025. This rapid escalation highlights the urgent need for advanced defenses, especially for critical infrastructure and national security. The Vellox suite aims to counteract these threats by utilizing AI technologies to enhance defensive measures. As cyber threats continue to evolve and become more sophisticated, tools like Vellox may be essential for organizations looking to protect their systems and data.

Key Takeaways

Timeline: Newly disclosed

Original Article Summary

Booz Allen Hamilton’s new Vellox suite showcases how AI-native cyber defense can counter growing threats to U.S. national security and critical infrastructure. The company’s new threat report, When Cyberattacks Happen at AI Speed, shows that AI is widening the gap between the speed of cyberattacks and time to respond. In 2025, the average breakout time from initial access to ability to move into other systems “dropped to under 30 minutes, with the fastest cases measured … More → The post Booz Allen’s Vellox brings AI vs. AI defense to protect critical infrastructure and national security appeared first on Help Net Security.

Impact

Not specified

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Critical.

Read Original Article

Related Coverage

House Republicans roll out national privacy bill

CyberScoop

House Republicans have introduced a new national privacy bill aimed at regulating data collection and usage across the United States. This legislation appears to draw inspiration from existing privacy laws in states like Virginia and Kentucky. However, experts warn that the bill may struggle to gain sufficient bipartisan support, which could hinder its passage. The bill's introduction comes amid growing concerns over data privacy and consumer protection, making it a significant topic in the current political landscape. If passed, this legislation could set a new standard for how companies handle personal data, impacting both businesses and consumers nationwide.

Apr 22, 2026

New Mirai campaign exploits RCE flaw in EoL D-Link routers

BleepingComputer

A new campaign linked to the Mirai malware is exploiting a serious command-injection vulnerability in D-Link DIR-823X routers, identified as CVE-2025-29635. This vulnerability allows attackers to take control of the routers and integrate them into a botnet. Users of these routers are at risk as their devices can be hijacked for malicious purposes, including launching distributed denial-of-service (DDoS) attacks. This situation is particularly concerning since the affected routers are at the end of their life cycle, meaning they are unlikely to receive security updates. It’s crucial for users to be aware of this exploit and take necessary precautions to secure their networks.

Apr 22, 2026

Firefox report offers early insight into Claude Mythos AI model

SCM feed for Latest

A recent report from Mozilla reveals that the Claude Mythos AI model has identified hundreds of bugs within the Firefox browser. While this discovery can enhance the security of Firefox by allowing developers to patch vulnerabilities, it also poses a risk by potentially lowering the barriers for attackers. With these bugs exposed, malicious actors could exploit them before they are addressed. This situation raises concerns about the balance between improving security through vulnerability detection and the risk of making it easier for attackers to find and exploit weaknesses. Users of Firefox should stay alert for updates and patches to ensure their browsing experience remains secure.

Apr 22, 2026

DDoS wave continues as Mastodon hit after Bluesky incident

Security Affairs

Mastodon experienced a significant DDoS attack shortly after Bluesky faced a similar disruption. Both platforms, which serve as decentralized social networking sites, were temporarily knocked offline due to these attacks. Mastodon managed to restore its services within a few hours, but the timing of these incidents raises concerns about the security of emerging social media platforms. DDoS attacks can severely impact user experience and trust, making it crucial for these services to enhance their defenses against such threats. Users and developers alike should remain vigilant as these incidents highlight the ongoing challenges in securing online communication tools.

Apr 22, 2026

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker News

Researchers have discovered that malicious Docker images were uploaded to the official 'checkmarx/kics' repository on Docker Hub. Unknown attackers managed to overwrite existing tags such as v2.1.20 and alpine, and they also created a new tag, v2.1.21, which does not match any legitimate release. This poses a significant risk to users who may unknowingly download these compromised images, potentially exposing their systems to vulnerabilities. Companies relying on these Docker images for software development or deployment should take immediate action to ensure their environments are secure. This incident highlights the ongoing challenges in securing software supply chains against malicious actors.

Apr 22, 2026

Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers

Security Affairs

The Mirai botnet is exploiting a newly discovered vulnerability in older D-Link routers, identified as CVE-2025-29635. This command injection flaw allows attackers to execute arbitrary commands through specially crafted POST requests. The vulnerability is particularly concerning because it affects discontinued models that many users may still have in operation. With the public disclosure of a proof-of-concept (PoC) exploit, the risk of widespread attacks increases, putting users who have not updated their devices at significant risk. It's crucial for affected users to take immediate action to secure their routers to prevent unauthorized access.

Apr 22, 2026