Find notable cyber news and cases, enriched with sources, timelines, and signals.

Bitdefender GravityZone AI Visibility and Control (AIVC) launches AI inventory and risk scoring for protected Windows endpoints

Security Tool/Service
First reported
Last updated
Happening score
H score 12
1 unique sources, 1 articles

Summary

Hide ▲

Bitdefender launched GravityZone AI Visibility and Control (AIVC) to inventory AI software on protected Windows endpoints and assign risk scores before users can hide it inside browsers, editors, or local runtimes. It exposes shadow AI, MCP servers, and agent frameworks that traditional software inventory misses. The tool maps discovered services into 17 functional categories and affected endpoints so policy review and mitigation are more precise. Enforcement still relies on existing GravityZone controls such as Web Content Filtering, custom detection rules, and PHASR.

Timeline

  1. 13.10.2026 13:30 2 articles · 7h ago

    Bitdefender GravityZone AI Visibility and Control launches for protected Windows endpoints

    Initial Disclosure

    Bitdefender GravityZone AI Visibility and Control (AIVC) introduces a discovery and risk layer for protected Windows endpoints, answering which AI software is present, who is running it, and how much risk each tool carries.

    Show sources
  2. 13.10.2026 13:30 1 articles · 7h ago

    GravityZone BEST agent scans endpoints for hidden AI software

    Technical Analysis Update

    During the risk scan, the GravityZone BEST agent collects minimized metadata about AI software present on each endpoint and how it is configured, covering browser-reached assistants, editor extensions, local model runtimes, MCP servers, and agent frameworks; the inventory also groups discoveries into 17 functional categories and tracks more than 50 AI agents and more than 70,000 skills.

    Show sources
  3. 13.10.2026 13:30 1 articles · 7h ago

    Existing GravityZone controls handle AI enforcement after discovery

    Mitigation Patch Update

    AIVC itself does not block access or remove software, but once it names a tool administrators can enforce policy with Web Content Filtering, custom detection rules that attach Kill process, or PHASR; enabled through an existing policy, the feature surfaces results after the next risk scan.

    Show sources