Isku-dubbaridka Nuglaanta-Maalinta Zero-Maalinta iyo Horumarka AI: Walaaca sii kordhaya
Warshadaha teknoolajiyada ayaa ku wareegaya muuqaal adag halkaas oo nuglaanta eber-maalin ah iyo horumarka degdega ah ee AI ay isdhaafsanayaan, abuurista duufaan qumman oo ay tahay in xirfadlayaasha amniga ay wax ka qabtaan. Si loo fahmo arrintan, waxaa lama huraan ah in la qeexo ereyada muhiimka ah: dayacanka-maalin eber waxaa loola jeedaa cilladaha amniga ee aan hore loo aqoon oo ay ka faa'ideysan karaan weeraryahannada, halka horumarinta AI ay ku lug leedahay horumarinta hababka sirdoonka macmal ah oo si madaxbannaan u fulin kara hawlaha. Sida la sheegay [1], tirada dayacanka eber-maalin ee looga faa'iidaysto duurjoogta ayaa sii kordheysa, iyadoo tusaalayaal la xusi karo ay ka mid yihiin dayacanka halista ah ee laga helay Check Point's Products iyo Apple's iPhones iyo iPads. Dhanka kale, booska AI wuxuu markhaati ka yahay hal-abuurnimo muhiim ah, oo ay ku jiraan bilaabista GPT-5.6 Sol iyo Grok 4.5, iyo sidoo kale helitaanka OpenAI ee Ona ee Codex [2].
Korodhka u nuglaanshaha eber-maalin ee dhowaantan ayaa muujinaya khatarta sii kordheysa ee weerarrada eber-maalin ah, kuwaas oo ka faa'iidaysanaya nugul aan hore loo aqoon, taasoo ka dhigaysa kooxaha amniga waqti yar oo ay kaga jawaabaan. Tusaale ahaan, u nuglaanta eber-maalin ee Check Point, CVE-2026-16232, waxay leedahay cawaaqib xumo, oo ay ku jiraan tanaasulka xogta xasaasiga ah iyo carqaladaynta nidaamyada muhiimka ah [12]. Xaqiiqda ah in CISA ay ku dartay baylahdan tan la og yahay ee dayacanka laga faa'iidaysto (KEV) Catalog [13] waxa ay hoosta ka xariiqday darnaanta khatarta. Si loo qeexo saamaynta weerarrada eber-maalin ah, tixgeli kiiska jebinta Equifax, halkaas oo nuglaanta eber-maalin ee software-ka Apache Struts ay keentay soo-gaadhista xogta xasaasiga ah ee in ka badan 147 milyan oo qof.
Xawliga degdega ah ee hal-abuurka AI waa seef laba af leh. Dhinaca kale, AI waxay awood u leedahay inay wax ka beddesho warshadaha oo ay beddesho habka aan u nool nahay iyo shaqada. Dhanka kale, ku tiirsanaanta sii kordheysa ee nidaamyada AI waxay abuurtaa nuglaansho cusub iyo goobo weerar. Marka nidaamyada AI ay noqdaan kuwo baahsan, khatarta weerarrada AI ku shaqeeya ayaa sii kordhaya. Sida laga soo xigtay [14], mid kasta oo la xaqiijiyay jebinta amniga wakiilka AI, ka faa'iidaysiga CVE, iyo dayacanka ayaa la daba socdaa, taas oo muujinaysa baahida loo qabo ka feejignaanta khatarta soo ifbaxa. Tusaale ahaan, weerarrada phishing-ka ee ku shaqeeya AI waxay noqon karaan kuwo aad u casrisan, iyadoo la adeegsanayo algorithms-ka barashada mashiinka si looga fogaado ogaanshaha iyo khiyaanada isticmaalayaasha si ay u sheegaan macluumaadka xasaasiga ah.
Xidhiidhka u dhexeeya dayacanka eber-maalin iyo horumarinta AI waxay ku jirtaa xaqiiqda ah in nidaamyada AI aysan ka difaacin weerarrada eber-maalin ah. Dhab ahaantii, nidaamyada AI waxaa loo isticmaali karaa in lagu qaado weerarro casri ah oo ka faa'iidaysanaya dayacanka eber-maalin. AegisAI, oo ah shirkad ay aasaaseen madaxdii hore ee amniga Google, ayaa soo saartay xal AI ku shaqeeya si ay u joojiso weerarada phishing-ka ee AI ay wado [9]. Tani waxay iftiiminaysaa ciyaarta bisadda-iyo-jiirka ee u dhexeeya weerarrada AI-powered iyo difaaca. Si aad u sii sharaxdo qodobkan, tixgeli kiiska NotPetya ransomware, kaas oo isticmaalay xeeladaha injineernimada bulshada ee awoodda AI si uu u faafiyo ugana baxsado ogaanshaha.
Si loo mudnaan siiyo amniga wajahada dayacanka-maalin eber iyo horumarka AI, xirfadlayaasha amnigu waa in ay la socdaan khataraha iyo isbeddellada ugu dambeeyay. Tan waxaa ku jira la socodka ilaha sida [4] iyo [6] wararkii ugu dambeeyay iyo cusboonaysiinta nuglaanta eber-maalin iyo horumarka AI. Intaa waxaa dheer, kooxaha amnigu waa in ay mudnaanta siiyaan hagaajinta iyo cusboonaysiinta nidaamyada, iyo sidoo kale hirgelinta tillaabooyin ammaan oo adag si looga hortago weerarro-maalin eber ah. Tusaale ahaan, hirgelinta nidaamka maaraynta balastar adag waxay kaa caawin kartaa dhimista halista weerarrada eber-maalin ah, iyadoo la isticmaalayo aaladaha amniga ku shaqeeya ee AI waxay gacan ka geysan karaan ogaanshaha iyo ka jawaabista khataraha soo baxaya.
Mustaqbalka amniga waxaa qaabayn doona isgoysyada dayacanka eber-maalin iyo horumarka AI. Marka nidaamyada AI ay noqdaan kuwo baahsan, khatarta weerarrada AI ku shaqeeya way kori doontaa. Si kastaba ha ahaatee, AI ayaa sidoo kale loo isticmaali karaa in lagu wanaajiyo ammaanka, sida iyada oo loo marayo horumarinta xalalka AI-powered si loo joojiyo weerarrada phishing-ka ee ay wadaan AI. Sida laga soo xigtay [3], Juulaay 2026 waxay aragtay 27 AI oo bilaabay Khamiista, oo ay hogaaminayaan OpenAI, Anthropic, Google DeepMind, Meta AI ee wakiilada, moodooyinka xuduudaha, il furan, iyo koodh. Tani waxay muujinaysaa xawaaraha degdega ah ee hal-abuurka ee booska AI iyo baahida loo qabo xirfadlayaasha amniga si ay uga sii hor maraan qalooca.
Ilaha
- https://techcrunch.com/2026/07/
- https://aitoolsrecap.com/Blog/AINewsJuly2026.aspx
- https://thursdai.news/releases/2026-07
- https://techcrunch.com/
- https://aiweekly.co/ai-news-today
- https://www.timesofai.com/news/ai/
- https://thirdruntime.com/
- https://www.secondtalent.com/news/tech/
- https://techcrunch.com/2026/
- https://nvd.nist.gov/vuln/detail/CVE-2026-58644
- https://www.cvefind.com/
- https://www.securityweek.com/new-check-point-zero-day-vulnerability-exploited-in-the-wild/
- https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog
- https://axis-intelligence.com/ai-agent-security-incident-tracker/
- https://securityonline.info/