Crowdsourced AI and= Knostic (blog.virustotal.com)

VirusTotal has announced a partnership with Knostic to enhance its Crowdsourced AI offerings by integrating Knostic's AgentMesh Security Supply Chain Reputation Engine, focused on analyzing Visual Studio Code extension (.VSIX) files. This partnership is significant for the AI and machine learning community as it addresses the rising threat of supply chain attacks, particularly emphasized by recent incidents like the GitHub breach. With the increasing use of IDE-based AI coding assistants and specialized tools, ensuring the security of VS Code extensions is crucial for developers and security teams looking to mitigate risks before installation. The integration allows for an AI-driven evaluation of .VSIX packages, providing security teams with independent verdicts on the nature of the extensions (BENIGN, SUSPICIOUS, or MALICIOUS) and associated risk levels ranging from SAFE to CRITICAL. This capability includes advanced search functionality within VirusTotal's intelligence platform, enabling analysts to sift through Knostic's findings efficiently. By utilizing Knostic's insights, organizations can better protect themselves from the potential dangers posed by seemingly benign extensions that may harbor malicious functionalities. The announcement highlights a growing focus on collaborative security measures in the AI and software development ecosystem.