美国人工智能公司Anthropic的副首席信息安全官杰森·克林顿周四警告称，新发现的软件漏洞激增可能在未来几个月压垮防御体系，随着人工智能使识别安全弱点变得更容易，关键基础设施面临风险。
Anthropic's deputy cybersecurity chief warned Thursday that a surge in newly discovered software vulnerabilities could overwhelm defenses in the coming months, putting critical infrastructure at risk as artificial intelligence makes it easier to identify security weaknesses.
这家美国人工智能公司的副首席信息安全官杰森·克林顿警告即将到来的“漏洞海啸”，这可能导致包括电力和水务设施在内的关键系统运营商没有足够时间修复安全缺陷。
Jason Clinton, deputy chief information security officer at the US artificial intelligence company, warned of a coming "vulnerability tsunami" that could leave operators of essential systems, including power and water facilities, without enough time to fix security flaws.
他敦促组织将敏感计算机网络与外部访问隔离，以增加黑客渗透的难度。
He urged organizations to isolate sensitive computer networks from outside access to make them harder for hackers to penetrate.
“过去4天情况已经很糟糕了，但在好转之前还会恶化得多得多，”克林顿在美国社交媒体公司X上写道，“安全负责人们，不要浪费危机：请立即去董事会寻求帮助。不是为了AI，而是为了基础防护。”他补充警告称，组织需要承受大约18个月的高强度网络安全风险。
"As bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better," Clinton wrote on US social media company "Security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. Not for AI, for the basics," he added, warning that organizations would need to withstand heightened cybersecurity risks for approximately 18 months.
他的言论正值人们日益担忧AI工具发现软件弱点的速度可能快于企业和政府修复的速度，从而给黑客提供更多利用脆弱系统的机会之际。
His comments come amid growing concerns that AI tools could uncover software weaknesses faster than companies and governments can repair them, giving hackers more opportunities to exploit vulnerable systems.
周三，广泛用于支撑网站和在线服务的编程语言PHP的开发者发布了紧急安全更新，修复了两个严重漏洞，这些漏洞可能允许攻击者在无需凭证的情况下在受影响的服务器上运行恶意代码。
On Wednesday, developers of PHP, a widely used programming language that powers websites and online services, released emergency security updates addressing two critical vulnerabilities that could allow attackers to run malicious code on affected servers without needing credentials.
这两个漏洞的严重程度评分均为10分中的9.2分，开发者敦促组织立即安装更新。
The vulnerabilities were each assigned a severity score of 9.2 out of 10, and developers urged organizations to install the updates immediately.
克林顿没有指出是哪些近期事件引发了他的警告，也没有暗示这些事件有关联。
Clinton did not identify which recent incidents prompted his warning or suggest that they were connected.
Anthropic 此前曾报告称，利用其 AI 模型在公开可用的软件中发现了数千个漏洞，凸显了该技术正在加速安全弱点的发现。
Anthropic has previously reported using its AI models to discover thousands of vulnerabilities in publicly available software, highlighting how the technology is accelerating the discovery of security weaknesses.