Ukuzulazula Kwengozi Yesistimu: Ukubukeka Okuqanjiwe Ebucayini Bamafu kanye Nokuthunyelwa Okuzimele
Sibona inkathi yentuthuko esheshayo kwezobuchwepheshe. Ukubonisa izinselele ezingaba khona zesikhathi esizayo, ake sicabangele isimo sokucatshangelwa esisethwe ngo-Agasti 2026. Cabanga ngosuku lapho abalawuli e-Las Vegas bekhanyisa ukukhanya okuluhlaza ukusabalalisa okusabalele kwezinkulungwane zamarobhothi, okubonisa isinyathelo esibalulekile esiya kukusasa ledolobha elizimele [1]. Ngesikhathi esifanayo, i-Microsoft, umhlinzeki oyisisekelo wobunikazi bebhizinisi kanye nokuvikeleka kwendawo yokugcina, iveza ubungozi obubalulekile be-Remote Code Execution (RCE) ku-Entra ID kanye nosuku oluyiziro ku-Defender, okusongela ubuqotho bengqalasizinda yedijithali [14]. Lezi akuzona nje izenzakalo ezingazodwa; zimelela izixwayiso ezixhumene. Njengoba sakha umhlaba oqhubeka uyinkimbinkimbi, ozishintshayo, izisekelo zawo zibonakala zisengozini enkulu. Le "whammy ephindwe kabili" ecatshangelwayo ka-Agasti 2026 isebenza njengomfanekiso onamandla wengcuphe yesistimu.
I-Microsoft's Foundational Cracks: Iqiniso Lenselele Yokuphepha Kwamafu
Ukuze kucace, ukudalulwa okucatshangelwayo kweMicrosoft kulesi simo akukona nje "iziqephu ezivamile." Zingabonisa inselele enkulu ekuthembekeni kwezinhlelo izinhlangano eziningi ezizethemba ngokuphelele. Okokuqala, cabanga nge-CVE-2026-69836, i-RCE ebucayi ku-ID ye-Entra (ngaphambili eyayiyi-Azure AD), isisekelo sokuphathwa kobunikazi bamabhizinisi amaningi [14]. Lokhu akulona iphutha elingacacile; ukuba sengozini yokukhishwa kwempahla okungase kuvumele abahlaseli abangagunyaziwe ukuthi basebenzise ikhodi bekude, okubeka usongo olukhulu kumasistimu omazisi asekelwe emafini [14]. Kuma-CTO nabakhi bezokuvikela, lokhu kumelela ukuchayeka okubalulekile: yona kanye indlela yokuqinisekisa abasebenzisi namasevisi kuyo yonke indawo ehlanganisiwe namafu ingaba sengozini.
Imiphumela ifinyelela kude. I-RCE ku-ID ye-Entra inganika amandla umhlaseli ukuthi adlule ukuqinisekiswa, enze ubunikazi bomgunyathi, noma athole ukufinyelela okuphikelelayo kuyo yonke i-ecosystem yamafu yenhlangano. Lokhu kubukela phansi ngokuqondile umgomo welungelo elincane kanye nezakhiwo ze-zero-trust eziqaliswe ngokucophelela. Ubungozi budlulela ngalé kokuphulwa kwedatha kuya ekuphazamisekeni okungaba khona kokusebenza nokulawula okuphelele kwesistimu.
Ngasikhathi sinye, sicabanga 'i-RoguePlanet,' i-CVE-2026-50656, usuku olucatshangelwayo lweziro ku-Microsoft Defender olunikeza ukufinyelela kwezinga le-SYSTEM [13]. I-Defender yakhelwe njengesendlalelo esibalulekile sokuzivikela endaweni yokugcina, umqaphi ezinsongweni ezivelayo. Ukuvumela ukufinyelela ku-SYSTEM kosuku oluyiziro kusho ukuthi ngisho nangezixazululo eziyinkimbinkimbi ze-EDR ne-XDR, umhlaseli angathola amalungelo aphezulu, akhubaze izilawuli zokuphepha, futhi asungule ukuphikelela okujulile ngaphambi kokutholwa.
Lesi simo sokucatshangelwa sikhomba odabeni olujulile lwesistimu. I-ecosystem ye-Microsoft enwetshiwe, nakuba inamandla, iveza indawo yokuhlasela eyinkimbinkimbi. Isithembiso "sokuphepha kwemvelo yamafu" singazwakala sinzima uma izingxenye eziyisisekelo ezifana ne-Entra ID ne-Defender zitholwa ngokuphindaphindiwe ziphethe amaphutha abalulekile, asebenzisekayo. Izinhlangano ziyacelwa ukuthi ziphathise lezi nkundla idatha ebucayi kanye nokusebenza, kodwa ukwehla okungaphezi kobungozi obuphezulu kungase kuphakamise ukuthi ijubane lentuthuko nokukhishwa kwesici kungase kudlule ukuqina kokuhlolwa kokuvikela nokuqina kwezakhiwo. Nakuba ukuchibiyela ngokushesha kungadingeka [14], umbuzo wesikhathi eside usasele: ingabe sakha endaweni eqine ngokwanele?
Ukunwetshwa kwe-Robotaxi yase-Las Vegas: Ukukala Okuzenzakalelayo, Ukukala Ubungozi Obuxhumene
Manje, ake sijike siye e-Las Vegas esimweni sethu sokuqagela sango-2026. Idolobhakazi livule imigwaqo yalo yaya “ezinkulungwaneni” zamarobhothi, lisuka ezinhlelweni zokushayela liyisa ekusetshenzisweni komphakathi ngezinga elikhulu [1]. Lokhu kungaba ingqophamlando ebalulekile embonini yezimoto ezizimele (AV), okuwubufakazi beminyaka yokuthuthukiswa kwe-AI nobunjiniyela bamarobhothi. Kungabonisa ikusasa lapho ama-AV eyingxenye evamile yempilo yasemadolobheni, ethonya yonke into kusukela ekuhlelweni kwedolobha kuya kwezokuthutha [1].
Uma ubheka phezulu, lokhu kwandiswa kuyajabulisa, kuyathembisa ukusebenza kahle, ukuncishiswa kwethrafikhi, kanye nemigwaqo engase ibe nokuphepha. Kodwa-ke, ngaphansi kokuqanjwa kabusha kukhona isizinda esisha sobungozi besistimu. Asicabangi nje ukuphepha kwemoto ngayinye; sicabangela ubuqotho bokusebenza kwayo yonke imikhumbi, ephethwe amasistimu e-AI ayinkimbinkimbi nengqalasizinda exhumene.
Cabangela indawo yokuhlasela enwetshiwe. I-robotaxi ngayinye iyikhompyutha eyinkimbinkimbi enamasondo, efakwe izinzwa, amaphrosesa, namamojula okuxhumana. Imikhumbi incike ekuxhumekeni kwenethiwekhi okuqinile, idatha yemephu enembile, nezinhlelo zokulawula ezimaphakathi. Kuthiwani uma okulingana ne-'RoguePlanet' bekumele kufake engozini isistimu yokusebenza yerobhothi, inikeze umhlaseli ukulawula izinga le-SYSTEM phezu kwemoto, noma okubi nakakhulu, umkhumbi wonke? Kuthiwani uma i-RCE yesitayela se-Entra ID bekufanele ifake engozini ubunikazi nokulawulwa kokufinyelela kwendiza elawulayo yalezi zimoto ezizimele, okuvumela abalingisi abangagunyaziwe ukuthi bakhiphe imiyalo noma baphazamise amasevisi?
Ukukhanya okuluhlaza okulawulwayo okucatshangelwayo e-Las Vegas [1] kumelela ukuzibophezela okukhulu. Yize ikhombisa ukwethemba okukhulayo ekuphepheni nasekulinganiseni kobuchwepheshe be-AV, iphinde yethule izinselelo ezintsha. Ubumfihlo bedatha, ukucatshangelwa kwe-AI kwesimilo, kanye nokusebenza kokuphatha inqwaba yezimoto ezishayelwa abantu nezizimele kubalulekile. Ukuhlolwa kwangempela kuzovela lapho ubungozi obungalindelekile bubonakala, hhayi nje ezimotweni ezingazodwana, kodwa kumasistimu axhumene, axhumene alawula ukusebenza kwazo.
Izingozi Zokuguqulela: Ubuthakathaka Esikalini
Intambo evamile phakathi kwezinselelo zethu ezicatshangelwayo zokuphepha ze-Microsoft kanye nokunwetshwa kwerobhothi ye-Las Vegas ukungalingani okubalulekile phakathi kwejubane lokuqamba izinto ezintsha kanye nesivinini sokuphepha nokuvuthwa kokulawula. Silinganisa ngokushesha izinto eziyinkimbinkimbi, ezishayelwa yi-AI nengqalasizinda yamafu, ngokuvamile ngaphandle kokuqonda ngokugcwele izindlela zokuhluleka kwe-cascading noma ama-vectors okuhlasela anoveli abethulayo.
Le "whammy double" ecatshangelwayo ayizona nje izindaba ezimbili ezihlukene; kuwumfanekiso wenselele ejulile yesistimu. I-AI ethuthukisiwe kanye ne-automation (njenge-robotaxis) kusetshenziswa phezu kwezinkundla zamafu eziya ngokuba nzima (njenge-Entra ID) nezixazululo zokuphepha ze-endpoint (njenge-Defender). Uma izendlalelo eziyisisekelo zibonisa ubungozi, izendlalelo ezingaphezulu ezisheshisa ukuthunyelwa ngobuningi ziba sengozini kakhulu ngokwemvelo.
Cabanga ngesimo lapho umlingisi osezingeni eliphezulu, osebenzisa i-Entra ID RCE, ezuza ukufinyelela kungqalasizinda yamafu elawula umkhumbi wamarobhothi wedolobha. Noma 'i-RoguePlanet' eyiziro-day ihloselwe ukulawula izimoto ezizimele ngazinye, izenze amathuluzi okuphazamisa. Lezi akuzona nje izinganekwane eziqagelayo; ziyizandiso ezinengqondo zezinhlobo zobungozi esibubonayo namuhla. "Imvelo engapheli neguqukayo yezinsongo ze-inthanethi ngokumelene nezingxenye ezibalulekile zengqalasizinda" [14] ingadlulela ngalé kwezikhungo zedatha iye emigwaqweni yethu ebonakalayo.
Okubalulekile kwe-CTO: Ngalé Kwezinyathelo Ezisebenzayo
Kuma-CTO nabaholayo bonjiniyela, lesi simo sokucatshangelwa sigcizelela isidingo sokucabanga kabusha ngendlela yethu yokuba sengozini, ukuqina, kanye nedizayini yezakhiwo.
- Yamukela Ingqondo Ethi "I-Breach-Ready": I-ID ye-Entra ecatshangelwayo ne-Defender izehlakalo zigqamisa ukuthi ngisho nabathengisi abathenjwayo nezingqimba zokuphepha eziyisisekelo zingafakwa engozini. I-Zero-trust akuwona nje umqondo; kuyisibopho sokusebenza okufanele sidlulele kuzo zonke izendlalelo, okuhlanganisa abahlinzeki bomazisi nokuvikelwa kwephoyinti lokugcina.
- Beka Okubaluleke Kakhulu Ubulula Nokuqashelwa: Imvelo enwebekayo yezitaki zobuchwepheshe besimanje, ikakhulukazi emafini, idala indawo yokuhlasela ehlala inwebeka. Kufanele sibeke phambili ukulula, ukubonwa okuphelele, kanye nokumodela okuqinile okusongela ngaphezu kwesivinini sesici sodwa.
- Yenza Ukuhlola Okuphelele Kwengozi: Lapho kusetshenziswa ubuchwepheshe obushintshayo njengezimoto ezizimele, ukuhlola ubungozi kufanele kudlulele ngalé kokuphepha kwengxenye ngayinye kuya ebuthakathakeni besistimu bayo yonke i-ecosystem - kusukela kungqalasizinda yamafu kuya kumamodeli we-AI namanethiwekhi okuxhumana. Iyini imithelela yesimilo nezomthetho lapho uhlelo lwe-AI lwehluleka ngenxa yokuhlasela kwe-inthanethi?
- Tshala Ukuqina Nokusimama: Nakuba ukuvimbela kubalulekile, iqiniso liwukuthi ukuphulwa kuzokwenzeka. Ukugxila kwethu kufanele kushintshele ekutholeni ngokushesha, ukuvimbela, kanye nokululama. Lokhu kudinga izinhlelo eziqinile zokuphendula izigameko, ingqalasizinda engashintshi, kanye nezinhlelo ezingasasebenzi.
Ikusasa liyajabulisa, kodwa futhi liyinkimbinkimbi ngokwemvelo. Ukusatshalaliswa ngobuningi kwe-robotaxis e-Las Vegas, ngisho nangokucatshangelwa, kuwubufakazi bobuhlakani bomuntu, kodwa izinselele ezingaba khona zokuphepha ze-Microsoft zisebenza njengesikhumbuzo esiqinile sobungozi bethu njengeqoqo. Siphuthuma esikhathini esizayo lapho izibalo ziphakeme kunangaphambili, futhi izindleko zokunganeliseki zinamandla amakhulu. Le "whammy ephindwe kabili" ecatshangelwayo ka-Agasti 2026 iwucingo lwendlela enengqondo, eqinile, nezokuphepha yokuqala yokuqamba izinto ezintsha.
Imithombo
[1] Izindaba Eziphezulu Zezobuchwepheshe Namuhla, Agasti 21, 2026: I-Anthropic, Apple, Broadcom ... URL: https://techstartups.com/2026/08/21/top-tech-news-today-august-21-2026-anthropic-apple-broadcom-google-nvidia-openai-tes [2] Agasti 2026 - TechCrunch URL: https://techcrunch.com/2026/08/ [3] 2026 - TechCrunch URL: https://techcrunch.com/2026/ [4] I-Tech News Agasti 2026: 12 I-URL Yezindaba Ezishaqisayo, Eziqhumayo: https://imfounder.com/science-tech/explosive-tech-news-august-2026-ai-lawsuits-cyberattacks-big-tech/ [5] Izindaba ze-AI Namuhla - Agasti 22, 2026 | Izibuyekezo ze-AI zakamuva | I-URL ye-AI Herald: https://artificialintelligenceherald.com/ai-news-today [6] Izindaba ze-AI Namuhla, Agasti 22 - Izindaba eziphezulu ze-AI nezibuyekezo ezibukhoma | I-URL yamasonto onke ye-AI: https://aiweekly.co/ai-news-today [7] I-AI Daily Brief: Artificial Intelligence News | I-URL ye-AIbase: https://www.aibase.com/daily [8] Izibuyekezo ze-AI Agasti 2026: I-URL Yezindaba Eziqhumayo eziyi-15 Okufanele Uzazi: https://imfounder.com/science-tech/ai/ai-updates-august-2026-openai-astra-deepmind/ [9] Izihloko Ezihamba Phambili Eziyi-10 Zezindaba Zobuchwepheshe Be-APAC Namuhla (Agasti 22, 2026) | Okwesibili ... URL: https://www.secondtalent.com/news/tech/ [10] I-TechCrunch | I-URL Yezindaba Zokuqalisa Nobuchwepheshe: https://techcrunch.com/ [11] Isizindalwazi CVE, CWE, CISA KEV & Vulnerability Intelligence | I-CVE Thola i-URL: https://www.cvefind.com/ [12] Ukukhishwa: CVEProject/cvelistV5 - GitHub URL: https://github.com/CVEProject/cvelistV5/releases [13] I-Daily CyberSecurity • Izaziso zehora elinguziro. Ukuhlaziya okungenakuqhathaniswa. I-URL: https://securityonline.info/ [14] I-ID Ebalulekile Ye-Microsoft Entra ID ye-RCE Iphutha Ivumela Abahlaseli Abakude ukuthi Basebenzise ... URL: https://cyberpress.org/critical-microsoft-entra-id-rce-flaw/ [15] Ukulandelela Isigameko Sokuphepha Komenzeli we-AI 2026: Konke Ukwephula Okuqinisekisiwe ... URL: https://axis-intelligence.com/ai-agent-security-incident-tracker/