根据Censys首次向Axios提供的最新数据，过去九个月暴露在公共互联网上的AI相关基础设施数量激增了63%。
The amount of AI-related infrastructure exposed to the public internet jumped 63% in nine months, according to new Censys data shared first with Axios.
为何重要： AI热潮不仅仅是在创造新模型和聊天机器人。它正在构建一个庞大的软件层，而公司也需要对其进行清点、修补和保护。
Why it matters: The AI boom isn't just creating new models and chatbots. It's creating a sprawling layer of software that companies will also need to inventory, patch and secure.
威胁等级：许多这些工具将AI应用与敏感的企业数据和其他服务连接起来，为试图访问公司系统的黑客创造了潜在的入口点。
Threat level: Many of these tools connect AI applications to sensitive corporate data and other services, creating potential entry points for hackers looking to access company systems.
- “这有点超出了工具本身，但这些[工具]会与一些非常敏感的系统进行通信，”Censys的首席研究员、该报告的合著者Emily Austin对Axios表示。
• "It's a little bit beyond just like the tool itself, but these [tools] talk to some really sensitive systems," Emily Austin, a principal researcher at Censys and co-author of the report, told Axios.
全景视角：截至7月，Censys识别出近268,000个面向互联网的系统，这些系统运行着44种不同的AI相关产品，而2025年10月这一数字约为164,000。
The big picture: Censys identified nearly 268,000 internet-facing systems running 44 different AI-related products as of July, up from roughly 164,000 in October 2025.
- 这些包括用于将AI模型连接到数据库、企业应用和其他服务的软件。
• These include the software used to connect AI models to databases, corporate applications and other services.
深层原因：构建和托管AI应用的便利性正在使公司越来越难以跟踪员工使用的软件以及这些软件是否安全。
Between the lines: The ease of building and hosting AI applications is making it harder for companies to keep track of what software employees are using and whether it's secure.
- Censys首席执行官Zakir Durumeric告诉Axios，即使在员工开始构建自己的AI应用之前，公司已经在努力跟踪其现有软件。
• Censys CEO Zakir Durumeric told Axios that companies were already struggling to keep track of their existing software even before employees started building their own AI applications.
- 这些新的AI应用程序通常可以连接到敏感的公司信息，例如电子邮件、财务记录和内部数据库。
• These new AI apps can often connect to sensitive company information, such as emails, financial records and internal databases.
细节聚焦：暴露最广泛的产品是n8n，这是一个工作流自动化平台，可以将AI代理连接到其他应用和服务。
Zoom in: The most widely exposed product was n8n, a workflow automation platform that can connect AI agents to other applications and services.
- Censys发现近114,000个面向互联网的n8n部署，其中大约77,000个运行着受至少一个最近披露的严重漏洞影响的软件版本。
• Censys found nearly 114,000 internet-facing deployments of n8n, including roughly 77,000 running software versions affected by at least one recently disclosed critical vulnerability.
- 研究人员还发现，超过54,000个面向公众的OpenClaw控制面板暴露在外。OpenClaw是一种开源AI代理，用户可以将其连接到个人账户和其他服务。
• Researchers also found more than 54,000 exposed control panels for OpenClaw, an open-source AI agent that users can connect to personal accounts and other services. Yes, but:
但情况并非如此：这些发现并未确定这些部署是否真的容易被利用，但它们凸显了暴露可访问敏感企业系统的软件所带来的风险。
The findings don't establish whether those deployments are actually vulnerable to exploitation, but they highlight the risks of exposing software that can access sensitive company systems.
结论是：公司需要像对待其他部署软件一样对待AI基础设施，奥斯汀表示，这包括定期审查、更新和保护这些系统。
The bottom line: Companies need to treat AI infrastructure like any other software they deploy, Austin said, including regularly reviewing, updating and securing the systems.