AI 正以快于组织修复的速度发现软件漏洞

Rohan Paul· @rohanpaul_ai · X·2026-10-24 00:35· 1 小时前AI 评分63

AI 导读

作者引述多方数据称 AI 发现软件漏洞的速度已超过组织的修复能力，攻击者也在跟进。美国国家漏洞数据库到 2026 年 7 月下旬已记录 45,207 个漏洞，接近创下纪录的 2025 全年；Google 一次 7 月更新修复 433 个 Chrome 漏洞（一年前为 11 个），Oracle 修复 1,449 个（此前为 309 个）。

正文 · 原文

AI is finding software flaws faster than organizations can fix them, and attackers are keeping pace.

The US National Vulnerability Database logged 45,207 flaws by late July 2026, nearly matching all of record-setting 2025.

Vendors show the same jump: Google fixed 433 Chrome bugs in one July update versus 11 a year earlier, and Oracle patched 1,449 against 309.

This week’s PHP emergency showed the result, as banks, airlines and governments pulled sites offline over 2 AI-found flaws.

Exploited flaws haven’t risen yet, largely because companies find most bugs themselves, as Google did with 401 of its 433.

Palo Alto Networks’ Unit 42 estimates that more than a third of 22M internet-exposed systems vulnerable to the PHP flaws run software that can’t be patched, and expects upgrades to take months.

来源：Rohan Paul · x.com