字号·· | 护眼
商业内幕

聪明人如何看待席卷互联网的网络安全“漏洞海啸”What smart people are saying about the cybersecurity 'vulnerability tsunami' that's roiling the internet

点「原文对照」整页切到原文,或双击某段只看那段的原文。

最近在流行的PHP编程语言中发现了网络安全漏洞,该语言被全球大量网站使用,其中包括各大公司和国家政府的网站。Cyber-security flaws were recently identified in the popular PHP programming language, which is used on a vast number of websites across the world, including those of major companies and national governments.

首席执行官和人工智能分析师纷纷对网络安全漏洞发出警告,这些漏洞不仅可能暴露大量个人数据,还可能让恶意攻击者在互联网上大肆破坏。

CEOs and AI analysts alike are sounding the warning on cybersecurity vulnerabilities that could not only expose large swaths of personal data but also allow bad actors to wreak havoc on the internet.

周三,OpenAI表示其智能体帮助检测到了严重的网络安全漏洞。在PHP(一个被70%的网站使用的开源编程语言)的基础设施中发现了两个“严重”缺陷。以下是聪明人对当前最大网络安全威胁的看法。

On Wednesday, OpenAI said its agents helped detect severe cybersecurity vulnerabilities Two "critical" flaws were found in the infrastructure of PHP an open-source programming language that 70% of websites use. Here's what smart people are saying about the biggest cybersecurity threat of the moment.

Anthropic副首席信息安全官杰森·克林顿 Anthropic副安全主管杰森·克林顿警告称,一场“漏洞海啸”即将来临,并表示关键基础设施尚未赶上形势。

Jason Clinton, Anthropic's deputy chief information security officer Anthropic's deputy security chief, Jason Clinton, warns that a "vulnerability tsunami" is coming — and says critical infrastructure hasn't caught up.

克林顿周三在X上发文,强调需要在核心网络漏洞被利用之前“修复关键基础设施”。周四,他向企业发出了又一次警告。

Clinton posted on X on Wednesday about the need to "patch critical infrastructure" before core network vulnerabilities get exploited. On Thursday, he issued another warning to companies.

他写道:“尽管过去4天情况已经变得很糟,但在好转之前,情况还会变得糟得多。”

"As bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better," he wrote.

他补充道:“安全主管们,千万不要浪费任何危机:请马上去找你们的董事会寻求帮助。不是为了人工智能,而是为了基础工作。(我们需要坚持大约18个月。)”人工智能分析师安德鲁·库兰 知名人工智能分析师安德鲁·库兰在周三至周四期间就多项网络安全威胁发表了看法。

"Security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)," he added. Andrew Curran, AI analyst Andrew Curran, a prominent AI analyst, weighed in on several cybersecurity threats from Wednesday to Thursday.

库兰周三在回应美国国家安全局关于威胁攻击者的网络安全公告时写道:“关于针对能源、食品和水利基础设施的潜在攻击,这一威胁非常真实。目前有人正在探测基础设施并进行摸底,这是一个切实的威胁。哪怕做一点准备也会有所帮助,以防万一。”

"Regarding potential attacks on energy, food, and water infrastructure, the threat is quite real. Someone is currently probing infra and feeling it out, it is an active threat. Even a little preparation can be helpful, just in case," Curran wrote on Wednesday in response to an NSA cybersecurity advisory about threat actors.

周四,库兰还重点提到了对奎斯特诊断公司的黑客攻击,他表示该公司服务于美国“大约一半”的医院和医生。

On Thursday, Curran also highlighted a hack of Quest Diagnostics, which he said serves "roughly half" of the US's hospitals and physicians.

人工智能投资者马特·舒默 2月,Hyperwrite前首席执行官马特·舒默在他的网站上发表了一篇广为流传的文章,题为《大事正在发生》,他在文中警告称,人工智能带来的大规模混乱可能会颠覆世界秩序。

Matt Shumer, AI investor In February, Matt Shumer, the former CEO of Hyperwrite, published a viral essay on his website titled "Something Big Is Happening," in which he warned of large-scale disruptions wrought by AI that could upend the world order.

舒默周四在他的网站和领英上发表了另一篇文章,这次的标题是《互联网正受到攻击。以下是如何保护你自己和你的家人》。

Shumer published another essay on Thursday on his website and LinkedIn, this time titled "The Internet Is Under Attack. Here's How to Protect Yourself and Your Family."

舒默写道:“就在此时此刻,在你阅读本文的同时,大群的人工智能智能体可能正在试图侵入你使用的网站。不是其中一个。而是许多个。我们正处于多年来最大的网络安全时刻。”根据舒默的发帖,可能会发生以下情况:你的信息泄露,导致骗子知道你的姓名、生日、地址和银行信息,他们的电话和短信听起来逼真。你的账户通过你几年前用过一次、且在所有地方都使用相同密码的某个网站被盗用。你所依赖的事物,比如某个应用程序、药房或商店的网站,瘫痪数天。

"Right now, as you read this, swarms of AI agents are likely trying to break into the websites you use. Not one of them. Many of them," Shumer wrote. "We are in the middle of the biggest cybersecurity moment in years." This is what could happen, per Shumer's post: Your information leaks, so scammers know your name, birthday, address and bank, and their calls and texts sound real. Your accounts get taken over through some site you used once, years ago, with the same password you use everywhere. And the things you depend on, like an app, a pharmacy or a store's website, go down for days.

需要明确的是:这一切正在发生,但人们最害怕的最坏情况尚未发生。我希望它们永远不会发生。但小心总比懊悔好,尤其是这种情况还将继续发生。

To be clear: this is ongoing, but the worst-case scenarios people are most scared of haven't happened. I hope they never do. But it's better to be safe than sorry, especially since this is going to keep happening.

舒默还概述了人们可以采取的四种保护自己的方法,包括更新所有软件,以及在公司和网站进行安全更新的同时,不上不熟悉的网站。

Shumer also outlined four ways people can protect themselves, including updating all their software and staying off sites they're unfamiliar with while companies and websites alike make their security updates.

他还建议人们对收到任何及所有的验证码和链接保持格外谨慎,以此保护自己的银行账户。人们还应该通过拔掉智能小工具的插头和删除未使用的应用程序来“关掉你没有使用的门”。舒默写道:“每一个联网的设备都是另一个入侵通道。”

He also advises that people protect their bank accounts by being extra cautious about any and all codes and links that they receive. People should also "close the doors you aren't using" by unplugging smart gadgets and deleting apps that aren't being utilized. "Every connected thing is another way in," Shumer wrote.

Salesforce首席执行官马克·贝尼奥夫 Salesforce首席执行官马克·贝尼奥夫。

Marc Benioff, CEO of Salesforce Salesforce CEO Marc Benioff.

《商业内幕》 马克·贝尼奥夫在周四的一篇X发帖中表示赞同Anthropic的杰森·克林顿。

Business Insider Marc Benioff agreed with Anthropic's Jason Clinton in an X post on Thursday.

贝尼奥夫写道:“杰森100%说得对。红色警报。”并附上了一个红色警报的表情符号。

"Jason is 100% right. Code red," Benioff wrote, along with a red alarm emoji.

阅读媒体原文 ↗