AI Accelerates Software Flaw Discovery as PHP Sites Rush to Patch
AI models can now inspect code continuously and produce exploit programs within hours, sharply shortening the time defenders have to respond, according to cybersecurity experts quoted by IT之家. VulnCheck research reported that AI-assisted discovery doubled the number of vulnerabilities found over the past year, while the PHP vulnerability prompted government and other websites to patch or temporarily shut down. Cloudflare CEO Matthew Prince expects serious disclosures to create weekly security crises for two years, although experts disagree that AI will automatically produce a surge of successful attacks.
The reports indicate that AI is materially changing vulnerability-discovery and exploit-development speed, forcing software operators to respond to previously hidden flaws much sooner than before.
IT之家 10 月 25 日消息，路透社采访的七名网络安全专家认为，随着 AI 技术不断揭示软件中隐藏的安全漏洞，类似本周全球多地政府网站接连中断服务的事件，几乎肯定会再次发生。
美国马萨诸塞州网络威胁情报公司 VulnCheck 即将发布的研究显示，AI 推动了软件漏洞发现数量的增长，过去一年发现的漏洞数量同比翻了一番。
数字基础设施公司 Cloudflare 的 CEO 马修 · 普林斯指出：“我知道，其他一些关键软件中还存在不少严重漏洞。…… 我认为，接下来两年，我们每个星期都会觉得天要塌了。”
他预计，随着 AI 陆续发现互联网基础设施中长期隐藏的安全隐患，未来几个月网络安全行业将异常忙碌。
据IT之家了解，本周，欧洲及其他地区的政府网站接连中断服务，起因是广泛应用于互联网的老牌编程语言 PHP 被发现存在安全漏洞。各网站运营者随即紧急修复软件，防止黑客大规模利用漏洞发动攻击。部分运营者担心来不及修补，索性先关闭网站，待确保安全后再恢复运行。
#Cloudflare#PHP#VulnCheck#Hunt.io#Wiz Research#PHP Foundation