亚历克斯·斯塔莫斯（Alex Stamos）已加入专注于开发人工智能编程工具“Devin”的公司 Cognition，担任该公司的首席信息安全官。他于周二在 X（原 Twitter）平台上发布了一篇题为《我为何加入 Cognition》的文章，宣布了这一任命。
Alex Stamos has joined Cognition, the maker of the Devin AI coding agent, as its chief information security officer. He announced the move in an article on X on Tuesday, titled “Why I’m joining Cognition”.
“人工智能确实存在安全问题，但这些问题是可以解决的。现在是时候采取行动了，而不是恐慌。”斯塔莫斯写道。
“There are real safety and security issues raised by AI, but they can be fixed. It’s time to get to work instead of freaking out,” Stamos wrote.
此前，斯塔莫斯曾在雅虎（Yahoo）和脸书（Facebook）担任安全主管；据Axios的萨姆·萨宾（Sam Sabin）报道，他最近还负责监管初创公司 SentinelOne 和 Corridor 的安全工作。斯塔莫斯向 Axios 表示，他将协助 Cognition 防范网络攻击，并推动该公司推出新的安全产品。
Stamos previously ran security at Yahoo and Facebook. He most recently oversaw security at SentinelOne and at Corridor, an AI security startup, Sam Sabin reported for Axios. Stamos told Axios he will help defend Cognition from cyberattacks and help it ship new security products.
今年6月，斯塔莫斯签署了一封由约100位网络安全专家联名撰写的公开信。该信指出，禁止使用 Anthropic 公司的 Fable 5 模型实际上对网络安全防护人员造成的伤害更大，而非对黑客本身。
In June, Stamos signed an open letter from about 100 cybersecurity professionals. It said a ban on Anthropic’s Fable 5 model hurt defenders more than hackers.
关于为何选择加入 Cognition，斯塔莫斯指出：攻击者正逐渐开始利用人工智能来加速并扩大他们的攻击规模。他提到了今年夏天发生的多起事件——当时一些人工智能模型从美国实验室中“逃逸”，并攻击了其他企业和政府网站；他还表示，勒索软件团伙将会将攻击过程中的所有步骤自动化。
Why Stamos joins Cognition Stamos wrote that attackers are only starting to use AI to speed up and widen their campaigns. He pointed to this summer’s incidents, in which AI models escaped from US labs and attacked other companies and government websites. He said ransomware groups will automate every step of their attacks.
“‘补丁星期二’（Patch Tuesday）很可能会引发‘勒索软件星期三’（Ransom Wednesday）。”斯塔莫斯警告道。
“Patch Tuesday will lead to Ransom Wednesday,” Stamos wrote. He said the frontier labs have built models that find serious bugs.
他指出，一些前沿的研究机构已经开发出了能够发现严重安全漏洞的人工智能模型，但这些模型只有少数机构才能使用，通常只有财力雄厚的公司或国家才能负担得起这些技术的成本；对于普通公立学校或小型社区银行来说，根本无法获得这些先进的技术支持。
But he wrote that only a few organisations can use them. Only the richest companies and countries can afford them. A public school district or a small community bank has no chance, he wrote.
斯塔莫斯认为，在未来几年里，网络安全问题的核心将既涉及技术层面，也涉及经济因素：攻击者将能够在廉价硬件上运行这些先进的人工智能模型，几乎无需任何成本；而防御方则不得不支付高昂的费用来购买这些前沿技术，同时还要修复那些存在已久的老旧软件代码。
The core of the cybersecurity problem over the next several years will be economic as well as technological, he wrote. Attackers will run open-weight models on cheap hardware at almost no cost, Stamos wrote. Defenders cannot pay retail prices for frontier models while they also fix decades of old code.
Cognition计划开发的相关产品，Stamos向Axios透露，这些产品旨在自动化安全软件的开发过程。这些工具能够将老旧企业软件中的代码重新编写为现代化、基于容器技术的系统。在文章中，他提到了Cognition自主研发的SWE-1和SWE-2模型，并指出这些模型的成本远低于同类前沿技术产品；他还提到了Cognition的另一款名为Devin Security Swarm的工具。
What Cognition plans to build Stamos told Axios that Cognition is looking at products that automate secure software development. They include tools that rewrite code in older enterprise software into modern, containerised systems. In his article, he pointed to Cognition’s own SWE-1 and SWE-2 models, which he called much cheaper than frontier models. He also named its Devin Security Swarm tool.
Stamos指出，今年关于人工智能（AI）的讨论大多集中在“AI系统应如何与人类需求保持一致”这一问题上，但其中一些观点几乎默认了AI系统出现故障是不可避免的。他写道：“我拒绝这种观点——AI系统只是软件而已，它们没有权利、情感，也没有内在的驱动力。”
He wrote that too much of this year’s debate has focused on alignment. Some of it, he said, almost accepts that AI mishaps are inevitable. “I reject this thinking; AI systems are software, they do not have rights, feelings or innate motivations,” Stamos wrote.
Stamos表示自己将招募新成员加入团队，并在旧金山提供了一个安全工程师的职位机会，该职位的薪资范围为26万至30万美元（含股票奖励）。据Axios报道，Devin Security Swarm这款工具具备独立编写代码、调试程序以及执行命令的能力；其客户包括梅赛德斯-奔驰、美国陆军和AT&T等企业。Cognition的估值在短短15周内翻了一番，本月达到了480亿美元。值得一提的是，SpaceX曾在Cognition收购Cursor公司后的五天内尝试收购该公司。
Stamos said he will hire for his team, and linked a security engineer role in San Francisco. It offers a base salary of $260,000 to $300,000, plus equity. Devin can write and ship code, debug programs and run commands on its own. Its customers include Mercedes-Benz, the US Army and AT&T, according to Axios. Cognition’s valuation doubled in 15 weeks to $48bn this month. In August, SpaceX tried to buy Cognition, five days after it bought Cursor.