←新闻详情

OpenAI更新于 10月24日 12:51

OpenAI 称其模型协助发现 PHP 关键安全漏洞

OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming langua

AI 导读

OpenAI 表示其模型在 Patch the Planet 计划中协助研究人员发现 PHP 的关键安全漏洞,PHP 被估计用于运行约 70% 的网站。过去两个月,OpenAI 牵头维护者、研究人员和安全厂商组成联盟,在漏洞披露前准备修复与防护,因修复复杂且需对 PHP 引擎做较大改动。OpenAI 称所有使用 PHP 的站点现可升级版本以保持安全,并认为这是近期影响最大的漏洞之一,也是 AI 能以互联网级规模发现安全漏洞的新阶段。

推荐理由

精选AI 评分 81

OpenAI 披露其模型在 PHP 中发现高危漏洞并提前协调修复,可观察 AI 参与安全防御的实际流程。

主题

标签

正文

当前显示原文,中文全文译文尚未就绪。

OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.

Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.

Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.

This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. https://t.co/TW3jrSbB3f

来源

OpenAI