一周前，企业软件初创公司Atomicwork的首席执行官Vijay Rayapati召集了约30名软件工程师，要求他们放下手头工作，将网络安全作为首要任务。
A week ago, Vijay Rayapati, CEO of enterprise software startup Atomicwork, gathered his team of roughly 30 software engineers and told them to drop everything and prioritize cybersecurity.
前48小时发生的一系列网络安全事件要求公司立即关注：作为所谓的根证书颁发机构，eMudhra被黑客攻破，而网站和软件制造商依赖它来向用户证明身份；用于将请求路由到不同AI模型的热门开源工具LiteLLM遭到入侵；以及在PHP编程语言中发现了一个安全漏洞，该语言被约70%的网站使用。
A series of cybersecurity incidents over the prior 48 hours demanded the company’s immediate attention: eMudhra, a so-called root certificate authority, which websites and software makers rely on to prove their identity to users, had been hacked; LiteLLM, a popular open-source tool for routing requests to different AI models, was compromised; and a security vulnerability had been found in PHP, a programming language used by roughly 70% of websites.
虽然这家初创公司最终确认未直接受到这些威胁的影响，但Rayapati表示，上周公司不得不紧急应对这一事实“说明没人准备好”。他计划每招聘三名技术人员就聘用一名网络安全工程师，并预计明年专注于网络安全的工程师人数将大致增加两倍，达到27人。
While the startup ultimately verified that it wasn’t directly impacted by the threats, the fact that it was scrambling last week “shows nobody’s ready,” Rayapati said. He is planning to hire one cybersecurity engineer for every three technical hires his company makes, and projects the number of cybersecurity-focused engineers will roughly triple to 27 in the year ahead.