Kewaya Haɗarin Tsari: Kallon Hasashen Halin Cloud da Ƙaddamar da Kai | B4N1

Kewaya Haɗarin Tsari: Kallon Hasashen Halin Cloud da Ƙaddamar da Kai

2 months ago · b4n1 Tiempo de lectura: 8 min

Kewaya Haɗarin Tsari: Kallon Hasashen Gajimare da Ƙarfafa Kai Tsaye

Muna shaida zamanin ci gaban fasaha cikin sauri. Don kwatanta ƙalubalen da za a iya fuskanta a nan gaba, bari mu yi la'akari da yanayin yanayin da aka saita a cikin Agusta 2026. Ka yi tunanin ranar da masu mulki a Las Vegas greenlight da tartsatsin jigilar dubban robotaxis, yana nuna wani muhimmin mataki zuwa makomar birane mai cin gashin kanta [1]. A lokaci guda, Microsoft, mai ba da tushe na asalin kamfani da tsaro na ƙarshe, yana bayyana rashin lahani mai mahimmanci (RCE) a cikin ID na Entra da sifili-rana a cikin Mai tsaro, yana barazana ga amincin kayan aikin dijital [14]. Waɗannan ba abubuwan keɓanta ba ne kawai; suna wakiltar gargaɗin haɗin gwiwa. Yayin da muke gina duniya mai rikitarwa, mai sarrafa kanta, tushenta yana da haɗari. Wannan hasashe "whammy biyu" na Agusta 2026 yana aiki azaman babban kwatanci na haɗarin tsarin.

Fassarar Gidauniyar Microsoft: Haƙiƙanin Kalubalen Tsaro na Cloud

A bayyane yake, bayyananniyar hasashen Microsoft a cikin wannan yanayin ba kawai "faci na yau da kullun ba." Za su nuna babban ƙalubale ga amincin tsarin da ƙungiyoyi da yawa suka amince da su kai tsaye. Na farko, yi la'akari da CVE-2026-69836, RCE mai mahimmanci a cikin ID na Entra (tsohon Azure AD), ginshiƙin gudanarwa na ainihi don kamfanoni marasa adadi [14]. Wannan ba aibi ba ne; rashin lahani ne mai yuwuwar barin maharan da ba su da izini su aiwatar da lamba daga nesa, suna haifar da babbar barazana ga tsarin tushen girgije [14]. Ga CTOs da masu gine-ginen tsaro, wannan yana wakiltar babban fallasa: ainihin hanyar da ke tabbatar da masu amfani da sabis a cikin mahallin mahalli da gajimare na iya lalacewa ta asali.

Abubuwan da ke faruwa suna da nisa. RCE a cikin ID na Entra na iya ba wa maharin damar ƙetare tantancewa, ƙirƙira abubuwan ganowa, ko samun ci gaba da samun dama ga yanayin yanayin gajimare na ƙungiyar. Wannan kai tsaye yana lalata ƙa'idar mafi ƙarancin gata da tsarin gine-ginen da ba a amince da shi ba da himma. Haɗarin ya zarce keta haddin bayanai zuwa yuwuwar rushewar aiki da cikakken sarrafa tsarin.

A halin yanzu, muna tunanin 'RoguePlanet,' CVE-2026-50656, ranar hasashen sifili a cikin Mai tsaron Microsoft wanda ke ba da damar matakin SYSTEM [13]. An ƙirƙira mai tsaro a matsayin mahimmin matakin tsaro akan ƙarshen, majiɓinci daga barazanar da ke tasowa. Ranar sifili da ke ba da damar shiga SYSTEM yana nufin cewa ko da tare da ƙwararrun hanyoyin EDR da XDR, maharin zai iya samun mafi girman gata, musaki sarrafa tsaro, da kuma kafa tsayin daka kafin ganowa.

Wannan yanayin hasashe yana nuna wani lamari mai zurfi na tsarin. Faɗin yanayin muhallin Microsoft, yayin da yake da ƙarfi, yana gabatar da yanayin hari mai rikitarwa. Alkawarin "tsaron ɗan ƙasa" na iya jin daɗi lokacin da aka sami abubuwan tushe kamar Entra ID da Defender akai-akai suna ɗauke da lahani masu mahimmanci, masu amfani. Ana buƙatar ƙungiyoyi da su ba wa waɗannan dandamali amintattun bayanai da ayyuka, amma duk da haka ƙarancin rashin ƙarfi na rashin ƙarfi na iya ba da shawarar cewa saurin ci gaba da fasalin fasalin na iya wuce ƙarfin gwajin tsaro da juriya na gine-gine. Yayin da yin faci nan da nan zai zama wajibi [14], tambayar mai dadewa ta rage: muna yin gini a kan isasshiyar ƙasa mai ƙarfi?

Fadada Robotaxi na Las Vegas: Scaling Automation, Scaling Interconnect Connected risk.

Yanzu, bari mu pivot zuwa Las Vegas a cikin yanayin hasashen mu na 2026. Birnin ya buɗe titunansa zuwa "dubban" na robotaxis, yana canzawa daga shirye-shiryen matukin jirgi zuwa babban jigon jama'a [1]. Wannan zai zama wani muhimmin ci gaba ga masana'antar abin hawa (AV), shaida ga shekarun ci gaban AI da injiniyoyin injiniyoyi. Zai nuna alamar makoma inda AVs wani yanki ne na gama gari na rayuwar birni, yana tasiri komai daga tsara birane zuwa dabaru [1].

A saman, wannan faɗaɗa yana da ban sha'awa, ingantaccen ingantaccen aiki, rage zirga-zirga, da yuwuwar hanyoyi masu aminci. Koyaya, a ƙarƙashin saman bidi'a akwai sabon yanki na haɗarin tsarin. Ba kawai muna la'akari da lafiyar abin hawa ɗaya ba; muna yin la'akari da amincin aiki na gabaɗayan jiragen ruwa, waɗanda tsarin tsarin AI masu rikitarwa ke sarrafawa da abubuwan haɗin kai.

Yi la'akari da faɗaɗa saman harin. Kowane robotaxi wata na'ura ce mai daɗaɗɗen kwamfuta akan ƙafafun, sanye take da na'urori masu auna firikwensin, na'urori, da na'urorin sadarwa. Jirgin ruwan ya dogara da ƙaƙƙarfan haɗin cibiyar sadarwa, madaidaicin bayanan taswira, da tsarin sarrafawa na tsakiya. Me zai faru idan 'RoguePlanet' daidai zai lalata tsarin aiki na robotaxi, yana ba wa mai hari matakin ikon sarrafa abin hawa, ko mafi muni, gabaɗayan rundunar jiragen ruwa? Me zai faru idan RCE irin Entra ID ya lalata ainihin asali da samun damar sarrafa * jirgin sama mai sarrafa kansa * na waɗannan motocin masu cin gashin kansa, yana barin ƴan wasan da ba su da izini su ba da umarni ko rushe ayyuka?

Hasken kore na hasashe a cikin Las Vegas [1] yana wakiltar ƙaƙƙarfan sadaukarwa. Yayin da yake nuna ƙarfin gwiwa ga aminci da haɓakar fasahar AV, yana kuma gabatar da ƙalubale na zamani. Sirrin bayanan, la'akari da ɗabi'a na AI, da fa'idodin sarrafa gaurayawan motocin da mutane ke tukawa da masu cin gashin kansu suna da mahimmanci. Gwajin gaskiya za ta fito ne lokacin da raunin da ba a tsammani ba ya bayyana, ba kawai a cikin motoci ɗaya ba, amma a cikin hadaddun, tsarin haɗin gwiwar da ke tafiyar da ayyukansu.

Hatsarin Maɗaukaki: Rashin ƙarfi a Sikeli

Zauren gama gari tsakanin ƙalubalen tsaro na Microsoft da na Las Vegas na faɗaɗa robotaxi shine mahimmin rashin daidaituwa tsakanin saurin ƙirƙira da saurin tsaro da balaga na tsari. Muna saurin haɓaka hadaddun, tsarin AI-kore da kayan aikin gajimare, galibi ba tare da cikakken fahimtar yanayin rashin gazawa ba ko sabbin abubuwan harin da suke gabatarwa.

Wannan hasashe “wahami biyu” ba labarai guda biyu ba ne kawai; misali ne na ƙalubale mai zurfi na tsarin. Advanced AI da aiki da kai (kamar robotaxis) ana tura su a saman dandamalin girgije masu rikitarwa (kamar ID Entra) da mafita na tsaro na ƙarshe (kamar Mai tsaro). Idan ginshiƙan tushe sun nuna rashin lahani, manyan yadudduka da ke haɓakawa zuwa yawan tura jama'a sun zama mafi haɗari.

Ka yi tunanin wani yanayi inda ƙwararren ɗan wasan kwaikwayo, wanda ke yin amfani da ID na Entra ID RCE, ya sami damar yin amfani da kayan aikin girgije da ke sarrafa jirgin ruwa na robotaxi na birni. Ko kuma ranar sifili na 'RoguePlanet' an yi amfani da makami don sarrafa motocin masu cin gashin kansu, mai da su kayan aikin rushewa. Waɗannan ba tatsuniyoyi ba ne kawai; su ne kari na ma'ana na nau'ikan raunin da muke gani a yau. "Haɗin kai da haɓaka yanayin barazanar yanar gizo game da mahimman abubuwan abubuwan more rayuwa" [14] na iya wuce bayan cibiyoyin bayanai zuwa titunan mu na zahiri.

Muhimmancin CTO: Bayan Ma'auni Mai Sauƙi

Ga CTOs da jagorancin injiniya, wannan yanayin hasashe yana jaddada buƙatar sake tunani a kan tsarinmu don haɗari, juriya, da ƙirar gine-gine.

  1. ** Rungumar Tunanin "Ƙarfafa-Shirye":** Hatsarin ID na Entra ID da abubuwan da suka faru na Defender suna nuna cewa hatta amintattun dillalai da matakan tsaro na tushe za a iya lalata su. Zero-aminci ba ra'ayi ba ne kawai; muhimmin aiki ne wanda dole ne ya miƙe zuwa kowane Layer, gami da masu ba da shaida da kariya ta ƙarshe.
  2. Ba da fifiko ga Sauƙi da Kulawa: Yaɗuwar yanayin tarin fasahar zamani, musamman a cikin gajimare, yana haifar da faɗaɗa kai hari koyaushe. Dole ne mu ba da fifiko ga sauƙi, cikakkiyar abin lura, da tsayayyen ƙirar ƙira fiye da fasalin fasalin kawai.
  3. ** Gudanar da Ƙimar Haɗaɗɗen Haɗari: *** Lokacin da ake tura fasahohi masu canzawa kamar motoci masu cin gashin kansu, ƙimar haɗari dole ne ya wuce lafiyar sassa na mutum zuwa yanayin yanayin yanayin yanayin gaba ɗaya - daga tushen kayan aikin girgije zuwa samfuran AI da hanyoyin sadarwar sadarwa. Menene tasirin da'a da shari'a lokacin da tsarin AI ya gaza saboda harin cyber?
  4. ** Saka hannun jari a cikin juriya da farfadowa:** Duk da yake rigakafin yana da mahimmanci, gaskiyar ita ce karya za ta faru. Dole ne hankalinmu ya koma ga ganowa da sauri, tsarewa, da murmurewa. Wannan yana buƙatar ingantattun tsare-tsare na mayar da martani, abubuwan da ba za su iya canzawa ba, da kuma tsarin da ba su da yawa.

Gaba yana da ban sha'awa, amma kuma yana da wuyar gaske. Yawan tura robotaxis a Las Vegas, ko da a zahiri, shaida ce ga hazakar ɗan adam, amma yuwuwar ƙalubalen tsaro na Microsoft suna zama abin tunatarwa ga raunin haɗin gwiwarmu. Muna hanzarta zuwa nan gaba inda hannun jari ya yi girma fiye da kowane lokaci, kuma farashin rashin gamsuwa yana da yuwuwar mai tsanani. Wannan hasashe "wahami biyu" na Agusta 2026 kira ne don ƙarin natsuwa, juriya, da tsaro-farkon tsarin ƙirƙira.

Sources

[1] Manyan Labaran Fasaha A Yau, Agusta 21, 2026: Anthropic, Apple, Broadcom ... URL: https://techstartups.com/2026/08/21/top-tech-news-august-21-2026-anthropic-apple-broadcom-google-nvidia-openai-teslamore [2] Agusta 2026 - TechCrunch URL: https://techcrunch.com/2026/08/ [3] 2026 - TechCrunch URL: https://techcrunch.com/2026/ [4] Tech News Agusta 2026: 12 Ban Mamaki, Labarun Fashe URL: https://imfounder.com/science-tech/explosive-tech-news-august-2026-ai-lawsuits-cyberattacks-big-tech/ [5] AI Labarai Yau - Agusta 22, 2026 | Sabbin Sabbin AI | AI Herald URL: https://artificialintelligenceherald.com/ai-news-today [6] AI News A Yau, Agusta 22 - Manyan Labaran AI & Sabunta Rayuwa | URL na mako-mako: https://aiweekly.co/ai-news-today [7] Takaitaccen Takaitaccen Tarihin AI: Labarun Hankali na Artificial | Aibase URL: https://www.aibase.com/daily [8] Sabunta AI Agusta 2026: 15 Labarai masu fashewa don Sanin URL: https://imfounder.com/science-tech/ai/ai-updates-august-2026-openai-astra-deepmind/ [9] Manyan Labarai na Fasaha 10 APAC A Yau (Agusta 22, 2026) | Na biyu ... URL: https://www.secondtalent.com/news/tech/ [10] TechCrunch | URL na Farko da Fasaha: https://techcrunch.com/ [11] Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Nemo URL: https://www.cvefind.com/ [12] Saki: CVEProject/cvelistV5 - GitHub URL: https://github.com/CVEProject/cvelistV5/releases [13] Tsaron Yanar Gizo na yau da kullun • Faɗakarwar sa'o'in sifili. Binciken da bai dace ba. URL: https://securityonline.info/ [14] Muhimmancin Microsoft Entra ID RCE Flaw Yana ba da damar Maharan nesa su aiwatar ... URL: https://cyberpress.org/critical-microsoft-entra-id-rce-flaw/ [15] AI Agent Security Event Tracker 2026: Kowane Tabbataccen Karye ... URL: https://axis-intelligence.com/ai-agent-security-incident-tracker/


¿Tienes preguntas?

Hablemos

Contáctame en LinkedIn