AI-Driven Attacks Push Security Teams Toward Virtual Patching

The core shift is the inversion of the traditional security timeline. Patch Tuesday used to give defenders a head start, but now automated scanners can weaponize a disclosed vulnerability in hours, before many patches are even tested. This is pushing security teams toward virtual patching—blocking the exploit at the network layer while the official fix is prepared. F5's partnership with CrowdStrike is a direct response, embedding the Falcon sensor onto BIG-IP appliances so that network infrastructure is monitored and protected as thoroughly as a laptop or cloud workload. The already existing customer base of over 200 deployments suggests the approach is gaining traction, and the low 1%-2% performance overhead addresses the historical trade-off between thorough security and network speed.

The urgency is underscored by CrowdStrike's finding that AI-enabled attacks rose 89% year over year, with the average breakout time at 29 minutes and the fastest at just 27 seconds. As Maddison notes, protections sitting in CDNs or WAFs have to become AI-powered to keep up. F5 is also extending this strategy to AI gateways, working with Salesforce's MuleSoft—indicating that the same need for real-time, AI-driven security is moving into new areas as AI becomes more integrated into business processes. The challenge is not the availability of information, but how to remediate it in real time, which is where such partnerships aim to make a difference.