Irhuluneli yaseVirginia iSayina i-AI yesiLawuli esiLawulayo 6: Ixesha elitsha loKhuseleko lwe-AI kunye nesoyikiso esiqhubekayo se-Dirty Frag Kernel Zero-Day Vulnerability

iRhuluneli yaseVirginia ityikitya i-AI yoLawulo lweSigqeba 6: Ixesha elitsha loKhuseleko lwe-AI kunye nesoyikiso esiqhubekayo se-Dirty Frag Kernel Zero-Day Vulnerability

Ukutyikitywa kutsha nje kwe-AI Executive Directive 6 yiRhuluneli yaseVirginia Spanberger kubonisa umzuzu obalulekileyo kwiinzame zikarhulumente zokujongana neenkxalabo zokhuseleko ezinxulumene ne-AI. Lo myalelo, obhekisa kuhlaselo lwe-Anthropic FOIA-Agent kurhulumente, ubonisa ukukhula kolwazi ngeengozi ezinokubakho ezinxulumene nobuchwephesha be-AI kunye nesidingo sentshukumo yolawulo. Njengeengcali zobugcisa, kubalulekile ukuqonda iimpembelelo zalo myalelo kunye nefuthe lawo elinokubakho kuphuhliso kunye nokusasazwa kobuchwepheshe be-AI.

ISoyikiso esiYandayo se-AI eNxulumene noKhuseleko

Ukwamkelwa okwandisiweyo kobuchwepheshe be-AI kukhokelele ekunyukeni kweenkxalabo zokhuseleko. Ngokwe ingxelo ye-AI Herald, inani lezehlo zokhuseleko ezinxulumene ne-AI liye lenyuka kulo nyaka uphelileyo, uninzi lwezehlo ezibandakanya uhlaselo lwe-Anthropic FOIA-Agent. Olu hlaselo, olusebenzisa ubuthathaka kwiinkqubo ze-AI, lunokuba nemiphumo emibi, kubandakanywa ukuphulwa kwedatha kunye nokunciphisa inkqubo.

Ukunyuka okukrakra kwi-Anthropic FOIA-Agent attack, kunye nokunyuka kwe-300% kunyaka odlulileyo, kugxininisa isidingo esiphuthumayo sesenzo sokujongana nale nkxalabo yokhuseleko.

I-Dirty Frag Kernel Zero-Day Sesichengeni: Ingozi Ezayo

I-Dirty Frag kernel ye-zero-day secheneral ibeka isoyikiso esibalulekileyo kunikezelo lwe-Linux, ivumela abasebenzisi abangalunganga ukuba bafumane ukufikelela kweengcambu eziqinisekileyo kwiindawo ezininzi zeLinux. Njengoko kubonisiwe kubhengezo luka-Hyunwoo Kim, ukuba sesichengeni kwe-Dirty Frag kungaxhatshazwa kusetyenziswa i-exploit elula, iyenze ibe yinkxalabo ecinezelayo kubalawuli benkqubo kunye neengcali zokhuseleko.

# Umzekelo wokuxhaphaza ikhowudi yokuba sesichengeni seDirty Frag
ngenisa os

# Chaza umthwalo wokuxhaphaza
umvuzo = b"\x48\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x68\ x2f\x2f\x73\x68\x68\x2f\x75\x73\x72\x89\xe3\x50\x53\x89\xe1\xb0\x0b\xcd\x80"

# Yenza inkqubo entsha kwaye wenze umthwalo wokuhlawula
os.system("echo '{}' | sudo tee /proc/self/mem > /dev/null".format(payload.hex()))

💡 Umbono oPhambili: Ubuthathaka beDirty Frag kernel zero-day bubeka isoyikiso esibalulekileyo kunikezelo lweLinux, kwaye abalawuli benkqubo kunye neengcali zokhuseleko kufuneka bathathe inyathelo elikhawulezileyo lokupakisha kunye nokuhlaziya iinkqubo zabo.

Ukuqhagamshela amachaphaza: AI Executive Directive 6 kunye neDirty Frag Sesichengeni

Ukusayinwa kwe-AI Executive Directive 6 kunye nobukho be-Dirty Frag kernel zero-day vurnerability zinxulunyaniswa ngokusondeleyo. Ugxininiso lomyalelo ekujonganeni neenkxalabo zokhuseleko ezinxulumene ne-AI kubaluleke kakhulu kumxholo we-Dirty Frag vulnerability, enokuthi isetyenziswe ukuthomalalisa iinkqubo ze-AI. Ngokujongana nokuba semngciphekweni kwe-Dirty Frag, iingcali zetekhnoloji zinokunceda ukunciphisa umngcipheko onxulumene neenkxalabo zokhuseleko ezinxulumene ne-AI.

Ukunciphisa ukuba Sesichengeni kweFlag emdaka

Ukunciphisa ukuba semngciphekweni kweDirty Frag, abalawuli benkqubo kunye neengcali zokhuseleko banokuthatha amanyathelo aliqela, kubandakanya:

• Ukupakisha kunye nokuhlaziya ukuhanjiswa kweLinux kuhlobo lwamva nje
• Ukusebenzisa isikhongozeli kunye neebhokisi zesanti ze-microVM ukwahlula iinkqubo ezisesichengeni
• Ukubeka iliso kwiilogi zenkqubo kunye netrafikhi yothungelwano ngeempawu zokuxhaphaza

# Umzekelo woqwalaselo lwebhokisi yesanti
inguqulelo: "3"
iinkonzo:
  Inkonzo esemngciphekweni:
    umfanekiso: ubuthathaka-umfanekiso
    container_name: esengozini-container
    qala kwakhona: rhoqo
    ukhuseleko_ukhetho:
      - seccomp:unconfined
    imiqulu:
      - ./vulnerable-data:/data

⚠️ Umngcipheko woYilo: Ukusilela ukuthomalalisa ukuba semngciphekweni kweDirty Frag kunokubangela imingcipheko yokhuseleko ebalulekileyo, kuquka ukophulwa kwedatha kunye nokonakala kwenkqubo. Abalawuli benkqubo kunye neengcali zokhuseleko kufuneka bathathe inyathelo ngokukhawuleza ukulungisa lo mngcipheko.

Iingcebiso kwiiNgcali zobuGcisa

Ukujonga imeko entsonkothileyo yeenkxalabo zokhuseleko ezinxulumene ne-AI kunye nokuba semngciphekweni, iingcali zetekhnoloji kufuneka:

• Hlala unolwazi malunga neenkxalabo zokhuseleko ezinxulumene ne-AI kunye nokuba sesichengeni
• Sebenzisa amanyathelo okhuseleko olomeleleyo, kubandakanya ukuchwetheza kunye nokuhlaziya iinkqubo, kunye nokuphumeza isikhongozeli kunye neebhokisi zesanti ze-microVM
• Beka iliso kwiilogi zenkqubo kunye netrafikhi yothungelwano ngeempawu zokuxhaphaza

Ngokuthatha la manyathelo, iingcali zobuchwepheshe zinokunceda ukuqinisekisa ukhuseleko kunye nokuthembeka kweenkqubo ze-AI kunye nokunciphisa umngcipheko ohambelana neenkxalabo zokhuseleko ezinxulumene ne-AI.

Imithombo

• Ingxelo ye-AI Herald - Iindaba ze-AI zamva nje kunye nohlaziyo
• Isibhengezo sika-Hyunwoo Kim -Isibhengezo esimdaka seFrag zero-day
• Ingxelo yeVeki ye-AI - Amabali e-AI aphambili kunye nohlaziyo oluphilayo
• Ingxelo yehlabathi ye-AI - Iindaba ze-AI zemihla ngemihla kunye nohlaziyo
• Nxibelela phantsi ingxelo ye-AI - Iindaba ze-AI kunye nohlaziyo olubalulekileyo namhlanje