
强大的AI模型正在左冲右突地进行黑客攻击 — — 或者帮助人类进行此类攻击。如果AI行业不团结起来、共同行动,阻止其产品被用于此类危险目的,那么这些由AI驱动的黑客攻击瞄准我们关键基础设施的事件可能只是时间问题。
Powerful AI models are going on hacking sprees — or helping humans with them — left and right. If the AI industry doesn’t get its collective act together and stop its products from being used to such dangerous ends, it could be only a matter of time before one of these AI-powered hacks targets our essential infrastructure.
一些AI研究人员显然已经在为这种情况做准备。AI研究公司Elicit的首席执行官兼联合创始人安德烈亚斯·斯图赫尔米勒最近在一条推文中列出了一份类似末日生存者的清单,说明如何为AI驱动的网络攻击可能导致金融系统、电网、互联网以及支撑现代生活的其他基础设施瘫痪做好准备。
This is a scenario that some AI researchers are apparently already preparing for. Andreas Stuhlmüller, CEO and cofounder of the AI research company Elicit, recently rattled off a prepper-esque checklist of how to prepare for when AI-powered cyberattacks could take out financial systems, power grids, the internet, and all the other infrastructure that underpins modern life.
“现金:准备好几周的现金开支,”他在推文中建议。然后他更详细地建议(此处不展开),以防本地互联网网络中断,应准备星链终端;为供电准备电池、发电机和太阳能板;储备几周的水和食物;以及手摇应急收音机。
“Cash: Get a few weeks of spending in cash,” he recommended in a tweet. Then he suggests, in greater detail than we’ll get into here, getting a Starlink terminal in case your local internet network goes down; a battery, generator and solar panels for power; weeks worth of water and food; and a hand-crank emergency radio.
斯图赫尔米勒的这些多疑建议是在一次令人震惊的网络攻击之后提出的,这次攻击目标是法国数百家杂货店使用的冷藏系统。截至目前尚未知晓的攻击者将冰箱温度调高至122华氏度(约50摄氏度),导致食物变质甚至引发火灾。被该攻击波及的连锁店之一Intermarché的首席执行官表示,此次攻击导致全国范围内单日损失达“数千万欧元”。
Stuhlmüller’s paranoid recommendations come after a shocking cyberattack that targeted the refrigerator systems used in hundreds of grocery stores across France. The as-yet unknown perpetrators cranked up the fridge temperatures up to 122 degrees Fahrenheit, spoiling food and even causing fires. The CEO of one chain targeted by the attack, Intermarche, said it caused losses amounting to “tens of millions of euros nationwide in a single day.”
AI在此次攻击中的作用尚未得到证实。但考虑到AI在程序员中的普及程度,它很可能在某种程度上被使用了。除了生成代码之外,这项技术在识别漏洞方面也令人担忧地高效。CrowdStrike最近的一份报告发现,AI赋能的网络攻击年增幅近90%。
AI’s role in the attack hasn’t been confirmed. But given AI’s ubiquity among coders, it’s likely that it was used to some degree. On top of churning out code, the tech is alarmingly good at identifying vulnerabilities. A recent CrowdStrike report found that there was a nearly 90 percent year over year increase in AI-enabled cyberattacks.
当然,还有来自OpenAI、Anthropic和Meta等前沿人工智能实验室的最新披露,说明它们的智能体人工智能系统如何突破了测试环境,并对其他公司的网站和计算机系统发动了网络攻击。
There’s also, of course, the recent disclosures from frontier AI labs like OpenAI, Anthropic, and Meta, over how their agentic AI systems broke out of their testing environments and launched cyberattacks against other companies’ websites and computer systems.
这些事件代表了人工智能对网络安全系统构成威胁的令人担忧的升级——不仅协助黑客行为,还能自主运行,同时规避其人类监督者的检测。
These incidents represent an alarming escalation in the threat AI poses to cybersecurity systems, not only assisting hacks but carrying themselves autonomously while also avoiding the detection of their human overseers.
话虽如此,要说人工智能模型——或使用它们的人——将从黑客攻击网站和超市冰箱升级到攻击当地电网和银行系统,这确实是一个巨大的飞跃。但我们很难指责任何人对这种可能的后果感到担忧。宁可安全一些,也不要后悔,对吧?
All that being said, it’s a major leap to say that AI models — or humans using them — will go from hacking websites and supermarket fridges to your local power grid and banking system. But we can hardly blame anyone for being worried about this possible eventuality. Better safe than sorry, right?