本周，因在开源编程语言PHP中发现严重安全漏洞，大量网站所有者被迫立即修补其站点，若无法及时更新则需暂时下线以确保安全 1。尽管该特定漏洞是由参与OpenAI和Wiz发起的“Hack the Planet”计划的人类研究人员发现的，虽然他们在利用该漏洞时使用了AI工具，但并非由AI模型直接发现 1。这一事件引发了关于人工智能和自动化代理可能加速挖掘互联网底层脆弱性的广泛讨论，指出随着大型语言模型（LLM）的普及，此类安全危机可能变得更加频繁且难以管理 1。
TechCrunch的Equity播客深入分析了这一被视为“清算时刻”的事件，指出互联网基础架构长期依赖老旧代码的风险 1。Sean O'Kane称此事件为“真正的清算时刻”，并强调互联网底层基础设施实际上是“用胶水和梦想粘合在一起的” 1。Cloudflare首席执行官Matthew Prince报告称，试图利用“PHP2Shell”漏洞的攻击尝试已激增至数百万次 1。此外，亚马逊博客指出，其蜜罐网络检测到在漏洞公开宣布之前就已有人尝试利用该漏洞 1。
据估计，约有70%的网站使用基于PHP的内容管理系统（如WordPress、Drupal），受影响范围达数千万个网站 1。对于未来影响，Kirsten Korosec担忧此事件只是开始，可能导致大量“链接失效”，使历史网页内容永久不可访问 1。
The discovery of a severe security vulnerability in the open-source programming language PHP has forced website owners to immediately patch their sites or take them offline, sparking a broader debate about whether artificial intelligence tools could accelerate the exposure of the internet’s fragile underlying infrastructure 1. Although this specific flaw was identified by human researchers participating in the "Hack the Planet" program launched by OpenAI and Wiz—who utilized AI assistance but were not replaced by autonomous models—the incident has drawn attention to the risks inherent in relying on aging code 1. Sean O'Kane described the situation as a "true reckoning moment," arguing that the internet's foundational systems are effectively held together by "glue and dreams" 1.
The scale of the threat is substantial, with estimates suggesting that approximately 70% of websites operate on PHP-based content management systems such as WordPress and Drupal, potentially affecting tens of millions of sites 1. Cloudflare CEO Matthew Prince reported that attempts to exploit the "PHP2Shell" vulnerability surged into the millions, while Amazon noted through its blog that its honeypot networks detected exploitation attempts even before the vulnerability was publicly disclosed 1. As large language models become more prevalent, experts warn that such security crises may occur more frequently and become harder to manage 1. Kirsten Korosec expressed concern that this event might be just the beginning, leading to widespread "link rot" that permanently renders historical web content inaccessible 1.
评论
还没有评论，欢迎留下第一条。