Piolink Finds 28 Open-Source Flaws With BlueHunter Platform

Piolink announced it discovered 28 new vulnerabilities in open-source software using BlueHunter, its CTEM-based cyber threat management platform, according to datanet.co.kr. Two of the 28 flaws were assigned CVE identifiers, and information about those CVE-assigned vulnerabilities will be disclosed in December.

The company's Threat Analysis Center analyzed the attack surface and software behavior of 10 widely used open-source services and 1 content management system in Linux environments. The vulnerabilities can cause memory access errors and abnormal termination, and some could potentially affect device recognition and management processes in Linux systems.

Piolink reported the issues to the official maintainers of the respective open-source projects, who have confirmed them. Some of the vulnerabilities are being managed through official security advisory channels, and both parties are conducting technical reviews on impact scope and fixes.

Piolink said it will not disclose software names or specific attack methods until security patches and official disclosure procedures are complete, following responsible disclosure principles.

BlueHunter is described as an agentic AI-based CTEM platform that discovers IT assets and attack surfaces, analyzes vulnerabilities and attack paths, and supports proactive response to security threats. Its Blue Mode identifies security risks through asset and vulnerability analysis and presents response priorities, while Red Mode confirms actual vulnerability exploitation possibilities through automated penetration verification from an attacker's perspective.

Piolink recommends identifying threats through BlueHunter, blocking real-time threats in web and API segments via its web firewall WebFront-K, and conducting 24-hour security monitoring.