字号·· | 护眼
彭博社

PHP2Shell不会是最后一个重大的AI网络安全风险PHP2Shell Won't Be the Last Big AI Cybersecurity Risk

点「原文对照」整页切到原文,或双击某段只看那段的原文。

摄影师:帕塔玛蓬·乌姆纳哈南/盖蒂图片社Photographer: Patamaporn Umnahanant/Getty Images

今年早些时候,网络安全研究人员在PHP中发现了一个长期潜伏的漏洞。PHP是一种开源编程语言,被全球大约70%的网站使用,如果该漏洞被利用,可能会导致灾难。而且,研究人员只有通过使用前沿人工智能模型,才摸清了这一漏洞的严重程度。今天,我们对话了网络安全公司Calif的两名员工(首席执行官泰·杜昂和工程师布鲁斯·当),该公司是最早发现该PHP漏洞的公司之一。他们的公司与各大人工智能实验室和新兴云服务商合作,帮助这些公司测试模型并在其基础设施中寻找漏洞。

Earlier this year, cybersecurity researchers discovered a vulnerability in PHP, an open-source coding language used in roughly 70% of the world's websites, that had been lying dormant for a long time, and if exploited, could have led to disaster. And the researchers only understood the extent of this bug through the use of frontier AI models. Today, we talk to two staffers at Calif (CEO Thai Duong and engineer Bruce Dang), the cybersecurity firm that was among the first to discover the PHP vulnerability. Their firm partners with the major AI labs and neoclouds, and they help these companies test models and look for vulnerabilities in their infrastructure.

《奇思妙想》:PHP2Shell不会是最后一个重大人工智能网络安全风险(播客)Odd Lots: PHP2Shell Won't Be the Last Big AI Cybersecurity Risk (Podcast)

杜昂和当向我们讲述了Calif是如何发现这起PHP黑客攻击的,该公司具体出售什么产品,以及在人工智能时代网络安全的未来会是什么样子。

Duong and Dang tell us how Calif uncovered the PHP hack, what the firm exactly sells, and what the future of cybersecurity looks like in the age of AI.

阅读媒体原文 ↗