AI 助開發者發現影響全球多達 70% 網站的漏洞
AI helps find vulnerability affecting up to 70% of websites
開發者利用 AI 找出一項影響全球多達 70% 網站的漏洞；法國、丹麥、芬蘭和荷蘭週三將政府網站下線。Google 的 Wiz 網絡安全團隊共同創辦人向《華爾街日報》表示，這是迄今最嚴重的 AI 漏洞，人類可能無法在沒有 AI 的情況下發現它；日本首相呼籲所有人當晚套用新發布的修補程式。
這則報道呈現漏洞發現與公開修補之間的攻防窗口，並指出 AI 加快識別漏洞的同時，亦可能令漏洞迅速進入黑客利用競賽。
France, Denmark, Finland, and the Netherlands took government websites offline Wednesday after web developers used AI to identify a bug affecting up to 70% of the world’s websites.
The exploit is “the most severe AI vulnerability… ever found,” the co-founder of Google’s Wiz cybersecurity team told The Wall Street Journal, adding that humans probably couldn’t have discovered it without AI.
Japan’s prime minister also urged “everyone to take action tonight” to apply the newly-released fixes. But AI will enable hackers to reverse engineer the bug in a “race to exploit” the public fix, a cybersecurity researcher told Reuters, with their next step being the “mass compromise of every vulnerable web server on the internet.”
來源：Semafor · semafor.com