行业动态
arstechnica.com ·
@Dan Goodin
微软9月修复创纪录的972个漏洞，其中112个为严重级别
微软9月安全更新修复约972个漏洞，创历史新高，其中112个为严重级别。此前OpenAI、微软等公司警告AI辅助攻击可能利用漏洞，行业正加大补丁力度。
AI推荐理由 微软9月修复创纪录的972个漏洞，其中112个为严重级别，反映AI辅助攻击威胁下安全补丁激增，对AI安全有参考价值。
75
正文
微软九月份的补丁非同寻常，修复了创纪录的大约972个漏洞，其中112个达到了高危严重性阈值。仅仅两个月前，微软修补了当时创纪录的570个漏洞。然后，上个月，微软修补了其中约620个。谷歌和其他公司近几个月也发布了创纪录数量的漏洞。两周前，OpenAI、Anthropic、亚马逊网络服务、谷歌、微软以及100家公司和组织发表了一封公开信，警告在预期中的人工智能攻击海啸到来之前，修补漏洞的时间窗口正在缩小，这些攻击会首先主动利用这些漏洞。业界正通过在其软件中发布空前数量的补丁来认真对待这一威胁。欢迎来到新常态。零日计划的研究员Dustin Childs称这种激增为“新常态”，并警告说尽管如此，人工智能辅助攻击可能造成的损害最终可能是巨大的。阅读全文文章 评论
查看原文（中文正文为 AI 翻译）
Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold. It was only two months ago that Microsoft patched a then-record 570 vulnerabilities. Then, last month, Microsoft patched some 620 of them. Google and other companies have also published record numbers of vulnerabilities in recent months. Two weeks ago, OpenAI, Anthropic, Amazon Web Services, Google, Microsoft, and 100 companies and organizations published an open letter warning of a narrowing window for patching vulnerabilities ahead of an expected tsunami of AI-enabled attacks that actively exploit them first. The industry is taking the threat seriously by pumping out unprecedented numbers of patches in their software. Welcome to the new normal Dustin Childs, a researcher at the Zero Day Initiative, calls the spikes the “new normal” and also cautions that despite them, the damage that’s likely to result from AI-assisted attacks could eventually be substantial. Read full article Comments