Google 旗下网络安全公司 Wiz 的首席技术官 Tomer Schwartz 在 TechCrunch 播客中讨论了近期发现的 PHP 语言两个关键漏洞。1 这些漏洞导致部分网站下线以进行修补。1
PHP 背后支撑着全球约 70% 的网站。1 Schwartz 指出，如果没有 AI 工具，Wiz 无法发现这些潜伏十余年的漏洞。1 参与修复工作的机构包括 Wiz、OpenAI、Calif 以及 PHP 团队。1
Schwartz 的核心观点是，AI 改变了漏洞被发现和利用的速度，且现有手动修补模式不可扩展，人类将无法应对未来日益严峻的“漏洞末日”挑战。1
Tomer Schwartz, Chief Technology Officer at Wiz, a cybersecurity firm owned by Google, has issued a stark warning about the accelerating pace of vulnerability discovery and exploitation, labeling the coming era as a "Vulnpocalypse." 1 Speaking on the TechCrunch podcast, Schwartz highlighted that artificial intelligence is fundamentally changing how security flaws are found and used, rendering traditional manual patching methods insufficient for future challenges. 1
The discussion centered on two critical bugs discovered in the PHP programming language just last week, which have forced organizations to urgently apply patches or take systems offline. 1 Given that PHP underpins approximately 70% of websites globally, these vulnerabilities pose a significant risk to internet infrastructure. 1 The remediation effort involved collaboration between Wiz, OpenAI, Calif, and the PHP development team, with Schwartz asserting that the issues, which had remained latent for over a decade, would likely have gone undetected without the aid of AI tools. 1
评论
还没有评论，欢迎留下第一条。