冰箱黑客攻击。63亿美元加密货币大盗窃案。14个国家的间谍活动，仅用11天就完成。这一切都发生在一周之内。
Refrigerator hacks. $6.3 billion crypto heists 14-country espionage campaigns carried out in just 11 days. All in the span of a week. Why it matters:
为何重要：国家支持的黑客正在以惊人的速度和规模寻找发动网络攻击的新方法，人工智能和自动化威胁将进一步拉大攻击者与防御者之间的差距。
State-backed hackers are finding new ways to launch cyberattacks at remarkable speed and scale, with AI and automation threatening to widen the gap between attackers and defenders. Driving the news:
新闻推动：本周早些时候，黑客在一夜之间篡改了数十家欧洲杂货店的制冷系统——导致温度升高、食物变质，这场大规模攻击有人将其与俄罗斯联系起来。
Hackers tampered with refrigeration system s at dozens of European grocery stores in one night earlier this week — raising temperatures and spoiling food in a sweeping attack some linked to Russia.
- “很难想象这不是某个国家冒充犯罪行为者所为，”前联邦调查局网络部门副主任辛西娅·凯泽对Axios表示。“考虑到攻击集中在欧洲，俄罗斯是合理的首要嫌疑对象。”
• "It's hard to imagine this is not the work of a nation state pretending to be a criminal actor," Cynthia Kaiser, former deputy director of the FBI's cyber division, told Axios. "Given the concentration around Europe, Russia is a reasonable first suspect."
- 欧洲制冷系统受到的攻击还影响了法国血库，当局周三表示。
• French blood banks were also affected in the attacks on European refrigeration systems, authorities said Wednesday.
- 哨兵一号研究人员周二报道称，与俄罗斯结盟的黑客此前曾声称对欧洲制冷系统发动过攻击。
• SentinelOne researchers reported Tuesday that Russian-aligned hackers have previously claimed attacks on European refrigeration systems.
- 与此同时，五角大楼也一直在调查今年夏天其军事基地制冷系统的一系列可疑黑客攻击。Nextgov报道称，调查人员怀疑伊朗是这些攻击的幕后黑手。其他人也暗示欧洲可能存在潜在的伊朗联系。
• Meanwhile, the Pentagon has also been investigating a series of suspected hacks of refrigeration systems on its military bases over the summer. Nextgov reported that investigators suspect Iran was behind those attacks. Others have suggested potential Iran ties in Europe as well.
大背景：目前尚无明确证据表明通过智能制冷系统攻击食品供应与人工智能或自动化有关，但国家黑客在其他入侵中已使用这些工具来加快其行动速度。
The big picture: No clear evidence has yet linked the attack on food supply through smart refrigeration to AI or automation, but nation-state hackers have used those tools in other breaches to speed up their operations.
- 谷歌研究人员周五表示，多个黑客组织在最近的攻击中使用了自动化安全测试工具。一个与中国有关的组织在短短15分钟内就深入侵入了受害者的网络。
• Google researchers said Friday that multiple hacking groups have used automated security testing tools in recent attacks. One China-linked group gained deep access to a victim's network in as little as 15 minutes.
- 根据Chainalysis的说法，上周创下纪录的币安大盗窃案背后的朝鲜黑客也很可能使用了自动化手段来转移被盗加密货币并掩盖踪迹。
• North Korean hackers behind last week's record-setting Binance heist also likely used automation to move stolen cryptocurrency and cover their tracks, according to Chainalysis.
典型案例：网络安全公司CrowdStrike发现，与中国有关联的黑客上个月在短短11天内，利用一款名为Artex的AI驱动工具，攻击了14个国家的200多家组织 • 该组织被称为“Vapor Panda”，攻击目标涵盖拉丁美洲、中东和欧洲的政府机构，以及美国的组织和多个国家的电信运营商。
Case in point: China-linked hackers used an AI-powered tool called Artex to target more than 200 organizations across 14 countries in just 11 days last month, CrowdStrike found • The group, known as Vapor Panda, targeted government agencies across Latin America, the Middle East and Europe, along with U.S. organizations and telecommunications providers in several countries.
- 黑客将Artex与DeepSeek及一款商业AI模型配合使用，运行代理程序，实现了行动大部分环节的自动化。
• The hackers paired Artex with DeepSeek and a commercial AI model to run agents that automated much of the operation.
深度解读： Artex是多款将熟练人类黑客曾经处理的任务自动化的AI驱动工具之一。
Between the lines: Artex is one of several AI-powered tools automating tasks once handled by skilled human hackers.
- CrowdStrike反对手行动高级副总裁Adam Meyers告诉Axios，他亲自测试了Artex，发现它探测网站弱点的速度远超人类。
• Adam Meyers, CrowdStrike's senior vice president of counter adversary operations, told Axios he tested Artex himself and found it could probe websites for weaknesses far faster than a human.
- “它在做渗透测试人员会做的事，”Meyers说。“但它的规模和速度，我认为是人类无法企及的。”
• "It was doing the stuff that you, as a pen tester, would do," Meyers said. "But it does it really at a scale and a speed that I think a human would not be able to do."
- Meyers表示，包括Cairn和Strix在内的其他AI驱动安全测试工具，也可能被改作类似攻击之用。
• Other AI-powered security testing tools, including Cairn and Strix, could be repurposed for similar attacks, Meyers said.
现实核查：制冷系统遭受的攻击，也引发了对被忽视的安全漏洞的担忧——黑客无需复杂的AI工具即可利用这些漏洞。
Reality check: The refrigeration attacks also raise questions about overlooked security gaps that hackers can exploit without sophisticated AI tools.
- “我看待这些攻击的方式，就像今夏针对美国供水系统的攻击一样：无人关注，直到登上新闻头条，”前公共部门CIO、Elisity执行顾问Mike Searight告诉Axios。
• "I see these attacks the same way I saw the attacks on U.S. water systems this summer: Nobody looked until it made the news," Mike Searight, a former public-sector CIO and executive advisor to Elisity, told Axios.
- AI驱动的黑客工具仍需漏洞可乘。“这不是魔法，”Meyers说。
• AI-powered hacking tools still need weaknesses to exploit. "It's not magic," Meyers said. What to
值得关注：英国国家网络安全中心周二警告称，AI可能加速现有黑客战术，使得防御薄弱、技术陈旧的组织面临特别高的风险。
The UK's National Cyber Security Centre warned Tuesday that AI could accelerate existing hacking tactics, leaving organizations with weaker defenses and outdated technology especially vulnerable.