New AI‑Native Threat‑Intel Platform, Automated Access Reviews, Agentless Container Scanning, and USB Malware Kiosk Unveiled – Implications for Third‑Party Risk
What Happened – Over the past week four vendors released new security products: Mallory launched an AI‑native threat‑intelligence platform that maps threat data to an organization’s attack surface; Secureframe added automated User Access Reviews to its compliance suite; Intruder introduced an agentless container‑image scanning service; and Advenica shipped a USB‑media File Scanner Kiosk for on‑premise malware detection.
Why It Matters for TPRM –
- New capabilities can shift the risk profile of existing third‑party providers (e.g., vendors may now offer stronger controls that reduce your exposure).
- Adoption of AI‑driven intel and automated governance may affect contractual security clauses and audit requirements.
- Emerging hardware solutions (USB scanner) highlight physical‑media risks that are often omitted from cloud‑centric risk assessments.
Who Is Affected – Technology‑SaaS vendors, cloud‑security providers, endpoint‑security hardware manufacturers, and any organization that relies on third‑party tools for compliance, container security, or media handling.
Recommended Actions –
- Review contracts with current vendors to determine if any of the new solutions can be integrated to satisfy security requirements.
- Update your vendor risk questionnaire to capture AI‑driven threat‑intel usage, automated access‑review processes, and hardware‑based malware controls.
- Conduct a gap analysis to see whether existing controls cover the attack surface addressed by these products.
Technical Notes – Mallory’s platform ingests thousands of open‑source and commercial feeds, applies AI contextualization, and feeds results into SIEMs and SOARs. Secureframe’s Access Reviews automate role‑based access verification via API integration with IAM directories. Intruder’s container scanner leverages vulnerability databases and runs as a server‑side service, eliminating the need for agents on host clusters. Advenica’s kiosk uses signature‑based AV engines plus heuristic analysis to scan USB drives at the point of entry. Source: Help Net Security – New infosec products of the week: April 10, 2026