Anthropic副首席信息安全官克林顿最近在X上发布了一条不祥的警告，此前几天内有几个严重的网络安全漏洞被公开。
Clinton, Anthropic's deputy chief information security officer, recently posted an ominous warning on X after several serious cybersecurity vulnerabilities were made public.
他写道：“过去4天情况已经很糟了，但在好转之前还会恶化得多。安全负责人们，千万别浪费危机：请立即去找你们的董事会寻求帮助。不是为了AI，是为了基础防护。（我们需要坚持约18个月。）”Salesforce首席执行官马克·贝尼奥夫回应道：“杰森说得100%对。红色警报。”
He wrote, "as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)”Salesforce CEO Marc Benioff responded, "Jason is 100% right. Code red."
克林顿一直在敲响这个警钟。8月，他发帖称：“漏洞海啸将在几个月内到来，届时将没有足够时间修补关键基础设施。”这些警告发布之际，正值一连串网络安全威胁出现。10月21日，两个新披露的漏洞影响多达70%的互联网，迫使企业和个人争相应用修复补丁。
Clinton has been sounding this alarm for some time. In August, he posted, "The vulnerability tsunami is coming in just a few months and there won't be enough time to patch critical infrastructure.”The warnings arrive amid a run of cybersecurity threats. On Oct. 21, two newly disclosed vulnerabilities impacting as much as 70% of the internet sent companies and individuals scrambling to apply the fix.
第二天，全球最大的医学实验室服务提供商之一Quest Diagnostics报告其Quanum实验室服务管理器发生“未经授权的访问”，并称“某些患者记录”被访问。
The next day, Quest Diagnostics, one of the largest providers of medical lab services, reported "unauthorized access" to its Quanum Lab Services Manager and said "certain patient records" were accessed.
数据泄露与互联网一样历史悠久。现在让专家担忧的是，AI可能成为前所未有的黑客工具。
Data breaches are as old as the internet. What worries experts now is how AI could become an unprecedented hacking tool.
AI工程师兼投资人马特·舒默在X上解释说，AI给黑客带来三大优势。模型能更容易地发现漏洞。一旦发现，“AI现在可以自行入侵，不需要熟练黑客。”而防御者“正竭力追赶”，因为攻击的速度快于系统加固的速度。
AI engineer and investor Matt Shumer explained on X that AI gives hackers three advantages. Models can find vulnerabilities more easily. Once they do, "AI can now break in on its own. No skilled hacker required." And defenders "are racing to keep up," because attacks move faster than systems can be shored up.
克林顿建议安全负责人专注于基础防护，个人也应如此。虽然你无法亲自抵御许多此类攻击，但你可以锁定你的大部分个人和财务信息。如何保护自己保持所有设备更新。当我们不及时更新硬件和软件时，就给黑客可乘之机。请确保您的手机、电脑和应用程序运行的是最新软件，因为这些更新通常会修复安全漏洞。
While Clinton advised security leaders to focus on the basics, the same should apply to individuals. Although you can't personally defend against many of these attacks, you can lock down much of your personal and financial information. How to protect yourself Keep everything updated. We make it easier for the hackers when we don't keep our hardware and software up to date. Make sure your phones, computers and apps are running the latest software, as these updates often fix security holes.
使用密码管理器。密码管理器让您更轻松地为使用的每个网站和服务设置不同的密码。这些应用会自动生成强健的密码并安全存储。好处在于，如果您使用的某个网站被攻破，您的其他密码依然安全。
Use a password manager. Password managers make it easier to assign a different password for every website and service you use. These apps create robust passwords automatically and store them securely. The benefit is that if one site you use is hacked, your other passwords stay safe.
开启多因素认证（MFA）。这是为关键账户增加额外保护的简便方法。MFA 有多种形式。可以是发送到您邮箱或手机的 PIN 码或验证码。也可以是您的面部或指纹。您还可以使用带有每 30 秒变动一次的验证码的身份验证器应用。
Turn on multifactor authentication (MFA). This is an easy way to add extra protection to your critical accounts. MFA comes in different forms. It can be a PIN or code sent to your email or phone. It can also be your face or fingerprint. You can also use an authenticator app with a code that changes every 30 seconds.
冻结您的信用报告。在不需要申请信贷时冻结您的信用报告。您可以通过 Equifax、Experian 和 TransUnion 的应用程序或网站冻结和解冻信用。这项服务免费，但要当心不需要的推销服务。
Freeze your credit. Freeze your credit reports when you don't need to apply for credit. You can freeze and unfreeze your credit using the Equifax, Experian and TransUnion apps or websites. It's free, but watch out for upsells for services you don't need.
锁定您的移动账户。要求您的运营商（通常通过其官方应用）阻止未经授权的购买、SIM 卡更换和运营商转移。
Lock your mobile account. Ask your carrier, usually through its official app, to block unauthorized purchases, SIM swaps and carrier transfers.
获取 IRS 身份保护 PIN。这组六位数字可防止他人利用您的信息报税并骗取您的退税。IRS 表示，获取 IP PIN 最简便的方法是登录您的在线账户。
Get an IRS Identity Protection PIN. This six-digit number prevents someone else from filing a tax return using your information and collecting your refund. The IRS says the easiest way to get an IP PIN is by logging into your online account.
锁定你的退休账户。如果你有退休账户，可以将其冻结或锁定，防止电子资金对外转账。例如，富达投资称之为“资金转账锁定”。对意外联系保持警惕。对任何你不认识的短信、电子邮件或电话都要保持警惕，将之视为获取你个人信息的企图。不要点击或回复任何你无法确认真实性的内容。如果不确定，请直接致电或前往相关机构。如果他们向你施压，或把事情说得很紧急，那很可能是诈骗。银行和政府机构不会这样运作。
Lock your retirement account. If you have a retirement account, you can freeze or lock it to prevent outbound electronic money transfers. Fidelity, for example, calls it "money transfer lock.”Be skeptical of unexpected contact. Be skeptical of any text message, email or phone call you don't recognize. Assume it's an attempt to get your personal information. Don't click or respond to anything you aren't sure is genuine. If you're unsure, call or visit the source directly. If they pressure you or make it seem like it's urgent, it's likely a scam. Banks and government agencies don't operate like that.
设定家庭安全暗语。人工智能已让克隆声音和制造虚假图像变得轻而易举。应对此问题的简单方法是，为家人设定一个不与任何其他人分享的安全暗语。如果有家人向你求助或索要他们平时不会需要的信息，先要求对方说出安全暗语。
Set a family safe word. AI has made it easy to clone voices and create fake images. An easy way to combat that is to set up a safe word for your family that you don't share with anyone else. If a family member asks for help or information they don't normally need, ask for the safe word.
虽然你无法防止每一次黑客入侵，但现在采取一些预防措施，能大大提高你保持安全的几率。
While you can't prevent every hack, taking some preventative measures now greatly improves your odds of staying safe.