Ethan Mollick 谈 AI 攻防下的补丁节奏：消费者也将频繁收到快速更新

Ethan Mollick· @emollick · X·2026-10-21 22:47· 1 小时前AI 评分71

AI 导读

Ethan Mollick 转发 OpenAI Patch the Planet 计划的进展：OpenAI 模型帮助研究者在 PHP 中发现严重安全漏洞，PHP 估计支撑约 70% 的网站。过去两个月 OpenAI 联合维护者、研究者和安全厂商完成修复并协调披露，用户现已可升级 PHP 版本并应用各安全厂商的缓解措施。Mollick 补充说，他接触的企业正因 AI 防御在攻击方 AI 发起攻势前抢先发现问题而疲于应付补丁节奏，普通消费者接下来也会同样经历频繁而快速的更新。

正文 · 原文

Companies I talk to are struggling with the rate of patches they need to do thanks to AI defenses finding issues before the inevitable wave of incoming cyberattacks by other AIs.

Now consumers are going to have the same experience of getting everything updated often & fast.

引用OpenAI@OpenAI

OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/

在 X 查看被引用的帖子

来源：Ethan Mollick · x.com