ʻO nā ʻōlaʻi māhoe: I ka wā e hāʻule ai ka hilinaʻi a me ka neʻe ʻana o nā aupuni
Ke ulu nei ka ʻenehana i ka haunaele nui. Ma kahi ʻaoʻao, ʻo ka ʻōnaehana kikohoʻe e kākoʻo ana i kā mākou ʻoihana e kū nei i kahi pā mau o nā nāwaliwali i hoʻohana ikaika ʻia. I ka manawa like, ke neʻe nei ka ʻāina o ka mana ʻenehana, me ka hoʻopiʻi nui ʻana o New York City i ka noho aliʻi lōʻihi o Silicon Valley ma ke ʻano he US tech-talent hub [1]. ʻAʻole kaʻawale kēia mau hanana; hōʻailona lākou i kahi hoʻololi hohonu, ʻōnaehana e koi ana i ka loiloi hou ʻana o ka hilinaʻi, ke kūpaʻa, a me ka wā e hiki mai ana o ka hana hou.
The Vulnerability Onslaught: A Crisis of Trust
Ua hōʻike ʻia nā mahina i hala aku nei i nā pilikia palekana koʻikoʻi no nā mea hoʻolako ʻenehana nui. ʻO nā hui e like me Apple, Microsoft, a me Cisco, i ʻike pinepine ʻia ma ke ʻano he mau pou o ka ʻōnaehana kamepiula, ua hōʻike ikaika i nā nāwaliwali a me nā hemahema koʻikoʻi. ʻAʻole kēia mau pilikia theoretical; hōʻike lākou i nā hoʻoweliweli pololei i nā hui honua.
Ua kamaʻilio hou ʻo Apple i nā mea nāwaliwali i hoʻohana nui ʻia. No ka laʻana, ʻo CVE-2023-42916 a me CVE-2023-42917, nā hewa WebKit ʻelua, ua hoʻohana ikaika ʻia i ka nahele, e hoʻopilikia ana i nā iPhones a me nā iPads [2, 3]. Hōʻike kēia mau haʻahaʻa e hiki ke hoʻopaʻa ʻia nā kaiaola i hoʻopaʻa ʻia i nā hoʻouka ʻana. No nā miliona o nā mea hoʻohana, ʻo ia ke ʻano o nā mea pilikino, i hoʻohana pinepine ʻia e komo i nā ʻoihana hui, hiki ke lilo i mau wahi kūpono o ka ʻae. Hōʻike kēia hiʻohiʻona i ka hoʻoneʻe ʻana o nā perimeter pūnaewele kuʻuna, e hana ana i nā mea hana a kēlā me kēia limahana i wahi hiki ke komo no nā mea hoʻouka.
Ua alo ʻo Microsoft i nā pilikia palekana koʻikoʻi. ʻO ka vulnerability 'CVE-2023-36025', kahi Windows Defender SmartScreen bypass, ua hoʻohana ikaika ʻia, e ʻae ana i ka poʻe hoʻouka e ʻalo i nā hiʻohiʻona palekana [4, 5]. ʻO ia mau hana e kūʻē i nā huahana palekana kumu e hōʻike ana i ka pono koʻikoʻi no ka hoʻopili koke ʻana i nā kaiapuni Windows. ʻO ka hoʻopiʻi maʻamau o Microsoft ʻo Patch Tuesday, ka mea e kamaʻilio pinepine ai i nā mea nāwaliwali, e hōʻike ana i ka hoʻoikaika mau ʻana e pono ai e hoʻopaʻa i kā lākou kaiaola nui [6]. ʻO ka hoʻonui nui ʻana o ka hoʻohana ʻana o AI i ka ʻike vulnerability, ʻoiai e hoʻohiki ana no ka ʻike ʻana i nā hemahema, e hōʻike ana i ka piʻi ʻana o ka paʻakikī a me ka nui o nā pilikia palekana a hiki i nā mea hana kiʻekiʻe ke hakakā nei e hoʻokele [7]. Hōʻike kēia e ʻoi aku ka wikiwiki o ka ʻike ʻana a me ka hoʻohana ʻana i nā hana pale kuʻuna kanaka.
ʻO Cisco, kahi mea hoʻolako nui o ka ʻoihana pūnaewele, ua hoʻopuka pū i nā ʻōlelo aʻoaʻo no nā nāwaliwali koʻikoʻi. No ka laʻana, ʻo 'CVE-2023-20198', kahi hemahema escalation pono ma Cisco IOS XE Web UI, ua hoʻohana ikaika ʻia a hāʻawi ʻia i kahi helu CVSS o 10.0 [8, 9]. Hōʻike ka helu CVSS maikaʻi loa i ka paʻakikī a me ka hopena kūpono, pinepine me ka hoʻohana pololei. No nā hui e hilinaʻi nei i ka ʻoihana Cisco, pono ia mau nāwaliwali i ka hoʻopili wikiwiki ʻana a me ka hoʻohaʻahaʻa ʻana i mea e pale ai i ka hoʻolaha ʻana o ka pūnaewele.
ʻO ka laha ʻana o nā haʻahaʻa koʻikoʻi, hoʻohana ikaika ʻia mai kēia mau alakaʻi ʻoihana e kuhikuhi ana i kahi paʻakikī ʻōnaehana i ka mālama ʻana i ka hilinaʻi i nā mea kūʻai aku ʻenehana. Hōʻike ia i kahi ʻāina hoʻoweliweli ākea kahi e hakakā ai nā ʻoihana waiwai maikaʻi e noho ma mua o nā mea hoʻouka kaua. No nā alakaʻi ʻenehana, koi kēia kūlana i ka hana koke: hoʻonohonoho mua i ka patching a me ka hoʻohaʻahaʻa ʻana, a e loiloi hou i ka palekana o ke kaulahao lako a me ka hilinaʻi o ka mea kūʻai aku. ʻAʻole kēia mau pilikia theoretical; he mau hana hoʻoikaika lākou e koi wikiwiki ana [10].
Ua hoʻololi ka Emepaea: Ke ulu nei ka mana o New York
ʻOiai ke kū nei ka ʻōnaehana kamepiula i nā pilikia palekana, ke hoʻololi nui nei ka hoʻoili ʻāina o nā talena ʻenehana. Ua ʻike ʻia ʻo New York City ma ke ʻano he mākeke talent tech kiʻekiʻe ma ʻAmelika ʻAmelika, ʻoi aku ka nui o ka Bay Area [11]. Hōʻike kēia i kahi hoʻololi kaulana mai nā makahiki he ʻumi kahi i lilo ai ke awāwa ʻo Silicon i ka epicenter no ka talena, kapikala, a me nā mea hou.
He hopena koʻikoʻi kēia hoʻololi i nā ʻoihana loea a me nā hui:
- Talent Acquisition: Hiki i nā hui ma ka Bay Area ke hoʻonui i ka hoʻokūkū a me ka neʻe ʻana o nā talena, ʻoiai hiki i nā hui ma New York ke komo i kahi kolamu talena hohonu aʻe aʻe [11]. Pono kēia i ka loiloi hou ʻana i ka uku, nā pōmaikaʻi, a me ka moʻomeheu ʻoihana.
- Career Mobility: No nā ʻoihana ʻenehana, hāʻawi ʻo New York i kahi ʻokoʻa koʻikoʻi, hiki ke hāʻawi i kahi koena hana-ola ʻē aʻe, kahi ākea ākea o ka ʻoihana e kālele ana (fintech, media, fashion tech, AI), a me kahi ʻano kumu kūʻai o ke ola i hoʻohālikelike ʻia i nā koina kiʻekiʻe o ka Bay Area [11].
- Nā Hou Hou: Hiki i ka hoʻokaʻawale ʻana o ka mana ʻenehana ke hoʻoulu i nā hub hana hou, hiki ke hoʻokūkū i ka monoculture i ʻike ʻia i kekahi manawa ʻo Silicon Valley. Hiki ke nānā aku ka ʻoihana kaiaola hoʻomaka i ka hikina [11].
ʻO ka noho aliʻi lōʻihi o ka Bay Area, i alakaʻi ʻia e kahi moʻomeheu ʻenehana ʻokoʻa a me ka piʻi ʻana o nā kumukūʻai, ke hoʻohālikelike ʻia nei. ʻO ka piʻi ʻana o New York e hōʻike ana i kahi oʻo ʻana o ka ʻoihana ʻenehana US, e neʻe ana i kahi kumu hoʻohālike i hoʻolaha ʻia a hiki ke kūpaʻa ma mua o kahi kikowaena kikoʻī.
ʻO nā pilikia pili: Fragility, Talent, a me AI Paradox
ʻO kēia mau hanana like ʻole ʻelua - nā pilikia palekana e hoʻomau nei a me ka neʻe ʻana o ka ʻāina i nā talena ʻenehana - pili. Hōʻike lākou i kahi palupalu ʻōnaehana hohonu a hōʻike i ka pono wikiwiki no kahi ala hou i ke alakaʻi ʻenehana.
Ke koi nei ka ʻāina palekana o kēia manawa i kahi pae kiʻekiʻe o nā talena: nā ʻenekini palekana akamai loa, nā mea hahai hoʻoweliweli, a me nā mea pane i hiki ke hoʻopaʻa wale akā hiki ke kali, hoʻohou, a me ka pale ʻana i nā mea hoʻoweliweli paʻakikī, hoʻohana ikaika ʻia. ʻO nā ʻenehana ʻenehana kuʻuna, ka mea i huki i nā talena kiʻekiʻe, ke alo nei i nā loli i kā lākou hoʻopiʻi. ʻO kahi nīnau koʻikoʻi inā hiki i nā kikowaena ʻenehana hou e like me New York ke hoʻoulu i nā talena ʻenehana palekana hohonu e pono ai e hakakā i nā nāwaliwali paʻakikī, a i ʻole ka hoʻomāhuahua ʻana o nā talena e hoʻoheheʻe i ka wai o ka ʻike e pono ai no kēia mau kaua koʻikoʻi.
ʻO ke kuleana o Artificial Intelligence ke hōʻike nei i kahi hoʻoikaika paʻakikī. ʻOiai ke hoʻohana nui ʻia nei nā ʻōnaehana i hoʻohana ʻia e AI i ka ʻike ʻana a me ka pale ʻana [7], hoʻolauna ʻo AI ponoʻī i nā mea hoʻouka kaua hou, paʻakikī, a me nā koi i nā hui palekana. ʻO nā mea hana i hoʻolālā ʻia e hoʻonui i ka palekana e kōkua pū i kahi ʻāina hoʻoweliweli e ulu nei. ʻO ka hoʻopaʻa ʻana i kahi honua i alakaʻi ʻia e AI e koi i nā talena nui a kūikawā - nā poʻe i hoʻomaopopo i ke aʻo ʻana i ka mīkini ʻenemi, ka hoʻopiʻi wikiwiki ʻana, a me nā hemahema a me nā nāwaliwali o nā kumu hoʻohālike ʻōlelo nui, e ʻoi aku ana ma mua o nā mākau coding kuʻuna.
ʻO ke kumu hoʻohālike kuʻuna o ka mana ʻenehana kikowaena, e hilinaʻi ana i kekahi mau mea kūʻai monolithic no ka palekana a me ka hoʻopaʻa ʻana i nā talena i nā hubs insular, ʻaʻole lawa. Ke hōʻike nei nā paʻakikī paʻakikī i ka hilinaʻi paʻa i nā mea kūʻai nui ʻaʻole ia he hoʻolālā palekana. ʻO ka neʻe ʻana i nā kikowaena e like me New York e hōʻike ana i kahi decentralization ākea, inā e hoʻokele maikaʻi ʻia, hiki ke hoʻoulu i kahi kaiaola ʻenehana hou aʻe.
No nā alakaʻi ʻenehana, maopopo ka ʻōlelo:
- E loiloi hou i ka Manaʻo Kūʻai: ʻAʻole lawa ka hilinaʻi wale ʻana i ka palekana o ka mea kūʻai aku. Pono nā hui e manaʻo i ka hoʻololi ʻana, kūkulu i nā pale pale, a koi aku i ka ʻike maopopo mai kā lākou mau hoa ʻenehana.
- Hoʻomua i ka loaʻa ʻana o nā kālena i hoʻokaʻawale ʻia: ʻO ka hoʻokūkū no nā talena akamai i ka honua a māhele ʻia. E nānā ma waho aʻe o nā hub kuʻuna, e hoʻokomo i nā ʻōnaehana hana mamao, a hoʻokō i nā hoʻolālā hoʻolimalima like ʻole e kiʻi i ka noʻonoʻo palekana a me ka ʻenekinia. Hōʻike ka ulu ʻana o New York e ʻimi ana ke kālena i nā wahi hou a me nā pilikia.
- Hoʻohui i ka AI: Hoʻohana iā AI no ka hiki ke pale, akā hoʻomaopopo pono i kona mau palena a me nā mea hoʻouka kaua hou āna i hoʻolauna mai ai. Hoʻokomo i nā hui i hiki ke hoʻopaʻa i nā ʻōnaehana AI, ʻaʻole wale i ka lawe ʻana iā lākou.
Aia ka ʻāpana ʻenehana i kahi manawa koʻikoʻi. Ke kū nei nā ʻōnaehana kikohoʻe i nā hoʻoweliweli mau, a ke ulu nei nā kikowaena kuʻuna o ka mana ʻenehana. E ʻoi aku ka maikaʻi o nā hui e hoʻololi, hoʻopaʻa i ka decentralization, a hoʻokomo pono i nā ʻōnaehana kūpaʻa a me nā talena like ʻole e hoʻokele i kēia mau loli a kūkulu i ka ʻenehana palekana a me ka ʻenehana no ka wā e hiki mai ana.
Nā kumu
[1] CBRE, "Scoring Tech Talent 2023," ʻOkakopa 2023. HKH: https://www.cbre.com/insights/reports/scoring-tech-talent-2023 [2] Kākoʻo Apple, "E pili ana i ka ʻike palekana o iOS 17.1.2 a me iPadOS 17.1.2," Nowemapa 30, 2023. HKH: https://support.apple.com/en-us/HT213984 [3] CISA, "Known Exploited Vulnerabilities Catalog," CVE-2023-42916, CVE-2023-42917. HKH: https://www.cisa.gov/known-exploited-vulnerabilities-catalog [4] Pūnaehana Pane Palekana ʻo Microsoft, "CVE-2023-36025 | ʻO Windows Defender SmartScreen Security Feature Bypass Vulnerability," Nowemapa 14, 2023. HKH: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36025 [5] CISA, "Known Exploited Vulnerabilities Catalog," CVE-2023-36025. HKH: https://www.cisa.gov/known-exploited-vulnerabilities-catalog [6] Microsoft Security Response Center, "November 2023 Security Update Release Notes," Nowemapa 14, 2023. URL: https://msrc.microsoft.com/update-guide/releaseNote/2023-11 [7] IBM Security, "The Role of AI in Cybersecurity: Opportunities and Challenges," 2023. URL: https://www.ibm.com/blogs/security/2023/08/the-role-of-ai-in-cybersecurity-opportunities-and-challenges/ [8] Cisco Talos Intelligence Group, "Cisco IOS XE Web UI Privilege Escalation Vulnerability," ʻOkakopa 2023. URL: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1857 [9] CISA, "Known Exploited Vulnerabilities Catalog," CVE-2023-20198. HKH: https://www.cisa.gov/known-exploited-vulnerabilities-catalog [10] CISA, "Known Exploited Vulnerabilities Catalog." HKH: https://www.cisa.gov/known-exploited-vulnerabilities-catalog [11] ʻO Bloomberg, "ʻO ke kūlanakauhale ʻo New York ʻo ia ka Top Tech Talent Market ma ʻAmelika ʻAmelika," ʻOkakopa 26, 2023. URL: https://www.bloomberg.com/news/articles/2023-10-26/new-york-city-is-now-the-top-tech-talent-market-in-north-america