OpenAI 模型帮助研究人员，作为我们“修补地球”倡议的一部分，发现了PHP中关键的安全漏洞，这是一种广泛使用的开源编程语言，用于运行约70%的网站。在过去两个月里，我们领导了一个由维护者、研究人员和安全提供者组成的联盟，准备了修复措施和保护措施，以在披露之前做好准备。这是因为这个修复程序相当复杂，需要对PHP引擎进行重大更改。现在所有使用PHP的网站都可以安全升级到最新版本，以保持安全，并且还可以应用来自各种安全供应商的各种缓解措施。由于这些缺陷的严重性以及PHP的广泛使用，我们将其视为近期最具有影响的漏洞之一。它也标志着一个新的阶段，即AI可以发现具有互联网规模影响的安全漏洞。这是一个 Defender 窗口的示例：据我们所知，前沿 AI 已经提前发现并报告了这一漏洞，给了守卫者时间做好准备。
https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
查看原文
原帖正文
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
引用自 X
原帖地址：https://x.com/i/status/2112907856018309586
原帖：
0 条评论
登录后可以参与讨论。
成员登录还没有评论。第一条认真回应会很重要。