Recorded Future Automates Vulnerability Detection Signature Creation in 31 Minutes
Summary
Recorded Future says its Attack Surface Intelligence platform can generate vulnerability-detection signatures in 31 minutes or less. The company reports processing more than 1,600 CVEs and generating over 900,000 detection events.
Key points
- Automated Signature Creation is available within Recorded Future's Attack Surface Intelligence product for its customers.
- The system maps internet-facing assets, matches newly surfaced vulnerabilities with live threat intelligence, and generates a detection signature or product fingerprint when a CVE is deemed relevant.
- The company says signature creation takes 31 minutes or less, compared with analyst-driven creation, and that the number of in-platform signatures has increased tenfold.
- Recorded Future reports that automation has processed more than 1,600 CVEs and triggered over 900,000 detection events across more than 46,000 hosts.
- The company says automated signatures affected over 75% of ASI customer projects; during August 9–14, 2026, they accounted for 19.8% of critical-severity and 25.5% of high-severity events.
- The company says automation extends, rather than replaces, expert-authored signatures from its Insikt Group.
Article Details
- Event Type
- Recorded Future announced Automated Signature Creation, an automated detection-signature capability within Attack Surface Intelligence (ASI).
- Impact
- The capability generates deployable signatures in 31 minutes or less. Recorded Future reports that automated signatures have processed more than 1,600 CVEs, triggered over 900,000 ASI detection events across more than 46,000 hosts, affected over 75% of ASI customer projects, and increased in-platform signature production tenfold. These are figures reported by Recorded Future.
CVE
Vendors
Products
Attack Surface Intelligence (ASI)Today, Recorded Future is announcing Automated Signature Creation, a new capability in Attack Surface Intelligence (ASI) to combat the speed of AI-generated exploits.JFrog ArtifactoryJust recently, it was reported that OpenAI’s own agents went rogue and exploited a zero-day vulnerability in Artifactory, now infamously tied to the Hugging Face incident.Recorded Future Platformwithin ASI automatically creates signatures, pieces of detection logic that empowers the Recorded Future Platform to recognize a specific vulnerable or exposed condition across organization’s assets in realTrimble CityworksFor example, in February 2025 we reported on the Trimble Cityworks: CVE-2025-0994, showcasing how manual signature creation worked.