
据 Cloudflare 首席执行官 Matthew Prince 称,国家行为体和犯罪分子很可能在 PHP2SHELL 漏洞披露之前就已对其进行了利用。“这些漏洞,就像前几天披露的 PHP 漏洞一样,已经在野外存在了多年,”Prince 在公司第三季度财报电话会议上表示。“我们正在回溯日志,寻找任何证据,看黑客、国家行为体或其他人过去是否曾利用过它们。我知道我们会发现这方面的例子。”
Nation-state actors and criminals likely exploited the PHP2SHELL vulnerability before its disclosure, according to Cloudflare CEO Matthew Prince. “These vulnerabilities, like the PHP vulnerabilities that were disclosed the other day, had been in the wild for years,” Prince said on the company’s third quarter earnings call. “We're going back through our logs looking for any evidence that hackers or nation-state actors or others had been using them in the past. I know that we're going to find examples of that.”
这只是他在会议上发出的警告之一,其中还包括一些 Cloudflare 客户认为 AI 代理“给他们的业务带来了灾难,想要将其拒之门外。”
That was just one of the warnings he offered on the call, among them that some of Cloudflare’s customers believe AI agents are “a bane to their business and want to keep them away.”
为了解释原因,Prince 假设他可以使用一个代理,在他结束一天的投资者关系工作后为他找一家餐厅。“它可能会去搜刮互联网,查看 1000 家不同餐厅的网站,下载 1000 份不同的菜单,然后我可能只会选择去其中一家,”他说。“问题是,那 999 家餐厅现在承担了成本,却得不到任何收益。”这位首席执行官承认,网络搜索一直会带来一些低价值流量,但他觉得代理活动的量——Cloudflare 此前曾预测将比人类点击量大一千倍——意味着问题现在已处于完全不同的规模。
To explain why, Prince hypothesized that he could use an agent to find him a restaurant to eat at after he finishes his day of investor relations duties. “It might go and scour the internet and look at 1,000 different restaurants' websites, pull down 1,000 different menus, and then I might choose to only go to one of those,” he said. “The problem is that 999 of those restaurants have now had a cost that is just been applied to them, but they are not getting any benefit.”The CEO admitted that web searches have always driven some low-value traffic but feels the volume of agentic activity – which Cloudflare has previously predicted will be one thousand times greater than clicks from humans – means the problem is now at a different scale.
Prince 对 Kubernetes 爱好者也有坏消息,因为他认为容器可能成为代理时代的另一个牺牲品。这位首席执行官承认,容器“比裸机甚至虚拟机有了显著改进”,并表示它们推动了超大规模云和移动应用的增长。但他认为容器已经“烹饪完毕”(意指已成定局/过时)。
Prince also had bad news for Kubernetes aficionados, because he thinks containers might become another casualty of the agentic age. The CEO allowed that containers are “a significant improvement over bare metal or even virtual machines,” and said they fueled the growth of hyperscale clouds and mobile applications. But he thinks containers are already cooked.
“超大规模云服务商和新兴云服务商基于容器的架构,根本无法以具有成本效益的方式跟上当今新的智能体范式,”他辩称道,再次引用了 Cloudflare 预计不久将在网络上看到的 1000:1 的机器人与人类流量比。这是一个以 Cloudflare 为中心的观点,因为 Prince 推销该公司的无服务器 “Workers” 服务作为容器的替代方案。
“The container-based architecture of the hyperscalers and neoclouds just can't keep up in a cost-effective way with the new agentic paradigms of today,” he argued, again citing the 1000:1 ratio of bot:human traffic Cloudflare expects to see online any year now. That’s a Cloudflare-centric view, because Prince pitched the company’s serverless “Workers” service as an alternative to containers.
该公司还提供一些产品,可以阻止智能体、减轻智能体活动带来的成本和流量影响,或允许组织将 AI 产生的流量变现。Prince 表示,对这些产品的需求正在快速增长,声称自 7 月 1 日以来,“大约 5%” 的网站选择加入 Cloudflare 的内容保护产品。CEO 称 Meta 已经是客户,并表示扎克伯格新推出的 “Muse” 智能体将通过创造更多第三方想要驾驭的智能体流量来使 Cloudflare 受益。
The company also offers products that can either block agents, ameliorate the cost and traffic impacts of agentic activity, or allow organizations to monetize traffic generated by AI. Prince said demand for those products is growing fast, claiming that since July 1st, “approximately five percent” of the web opted in to Cloudflare’s content protection products. The CEO said Meta is already a customer, and said Zuck’s new “Muse” agents will benefit Cloudflare by creating more agentic traffic that third parties want to tame.
他还指出了 39% 的同比收入增长,使季度收入达到创纪录的 7.825 亿美元。他认为未来会更好,因为安全状况糟糕透顶。“过去几周报告的新安全漏洞数量之多,可能让人觉得天塌了,”Prince 说。“我真希望能告诉你们我们已度过最坏时期,但我们没有。”他认为 Cloudflare 可以从安全灾难中获利,因为其业务范围和客户群的广度意味着它 “属于最早收到新漏洞悄悄披露的公司之一”,并在披露前完成修复。
He also pointed to year-on-year revenue growth of 39 percent, which saw quarterly revenue reach a record $782.5 million. And he thinks there are better days ahead, due to the terrible state of security. “It may seem like the sky is falling with the number of new security vulnerabilities that have been reported over the last few weeks,” Prince said. “I wish I could tell you we were through the worst, but we're not.”He thinks Cloudflare can profit from security misery because the extent of its activities and client base mean it is “among the first to receive quiet disclosure of new vulnerabilities” and remediates them before disclosure.
投资者认为这番言论合情合理,在盘后交易中将 Cloudflare 股价推高约 15%,这意味着该股弥补了早些时候因投资者担忧科技股估值过高而导致美国主要股指下跌约 4% 所遭受的跌幅,并进一步上涨。®
Investors thought this all made sense, and in after-hours trading sent Cloudflare shares up by around 15 percent, meaning it recovered and then improved on losses that it incurred earlier after major US indices dropped around four percent as investors who worry tech stocks are overvalued. ®