Rush is on to patch AI-discovered software vulnerability that could impact 70% of websites worldwideRush正在加紧修复人工智能发现的软件漏洞，该漏洞可能影响全球70%的网站。
The two critical flaws identified by AI could allow bad actors to get unauthenticated access to sites which, in theory, could allow them to control a web server remotely without needing a password, said James Sullivan, Director of Cyber and Tech at the Royal United Services Institute in London. That could allow a hacker to steal data, alter data or use the system as a platform from which to launch other attacks, he said. Taking websites offline while fixing the problem is “good practice,” and appropriate cyber risk management but it’s “staggering” that some of the flaws are more than a decade old, Sullivan said.
The two critical flaws identified by AI could allow bad actors to get unauthenticated access to sites which, in theory, could allow them to control a web server remotely without needing a password, said James Sullivan, Director of Cyber and Tech at the Royal United Services Institute in London. That could allow a hacker to steal data, alter data or use the system as a platform from which to launch other attacks, he said. Taking websites offline while fixing the problem is “good practice,” and appropriate cyber risk management but it’s “staggering” that some of the flaws are more than a decade old, Sullivan said.
Artificial Intelligence (AI) and National Security
Hybrid and State Threats
Technology, Security and Intelligence
Cyber Security and Resilience
Director, Cyber and Tech
伦敦皇家联合军种研究所网络与技术主管詹姆斯·沙利文表示，人工智能发现的这两个关键缺陷可能使不法分子获得未经身份验证的网站访问权限，理论上，他们无需密码即可远程控制网络服务器。他指出，这可能使黑客窃取数据、篡改数据，或利用该系统作为平台发起其他攻击。沙利文表示，在修复问题期间将网站下线是“良好的做法”，也是适当的网络风险管理，但令人“震惊”的是，其中一些缺陷竟然存在了十多年。
人工智能与国家安全
混合威胁和国家威胁
技术、安全与情报
网络安全与韧性
网络与技术总监