AI-based endpoint protection (EDR or AV) can be fooled a.k.a. our AI is bigger than yours - SecBI

Last week, security researchers announced to the world that they have managed to outsmart one of the most popular EDR (endpoint detection and response) products in the world using AI. Cylance has since then outlined protective measures to safeguard its customers. The researchers used a video game code to create what they described as a "universal bypass" exploit. After a careful analysis of CylancePROTECT's engine and model, they found that the security solution had a demonstrated a "bias" for a popular game. The AI model's bias was the result of the endpoint product whitelisting certain executables from the video game.