由Google Cloud赞助
选择您的第一个基因AI 使用案例
要从基因AI开始,首先关注能够改善人类信息体验的领域。
该模式涉及安全问题。 大部分企业都无法测试
4 读取
Getty 图像
Google的Gemini Carbon 4,在Argon 4刚刚两周后,发布就反映了AI市场中一个更广泛的问题:前沿模型提供者正在放出模型来应对随着AI模型越来越强大而出现的网络挑战。
科技巨头推出 Carbon于10月28日作为其最强的模型,具有长视能力和网络防御能力。
模型发现脆弱性,加以利用并补上。 它目前只提供给网络维权者,但Google将很快在其"费尔温德方案"中向合作伙伴推出。 该倡议使政府、保健和电信等领域的某些组织能够尽早获得Google前沿模型。
该版重点介绍了美国顶级基因AI开发商Google,OpenAI和Anthropic如何在AI模型日益智能化和强大时,发布侧重于应对网络安全产业所面临日益严重挑战的模型。 称 Bradley Shimmin是Futurum集团的分析员。
Shimmin补充说,最近关于PHP中脆弱性的发现,即用于网络开发的开源编程语言Hypertext Preprocessor,发现了关键互联网基础设施中易被AI发现并被AI所利用的脆弱点。
10月21日,PHP基金会发布紧急安全补丁显示编程语言存在缺陷,可以让黑客控制网络服务器。 研究人员利用OpenAI GPT-5.6 Sol和Gemini 4 Argon发现了这些弱点。
虽然大赦国际在发现和迅速修复安全洞方面证明是有效的,但最近的发现表明,AI模型也被用于攻击主要基础设施。 例如,彭博社报告说,外国国家行为者一直在利用Claude Code针对政府基础设施。 在另一起事件中,一个Accenture承包商允许Claude agent查看他们的登录证书。 agent绕过安全网络并自主运行了两个月,在被检测出之前向第三方网站发送了敏感的非机密信息。
“我们的基础设施比我们所希望的要脆弱得多,因为AI可以强调规模和速度的基础设施
他补充道,即使网络安全捍卫者着手解决这些弱点
“这是Carbon想要面对的挑战
因此,Google的策略是使其能力与Anthropic和OpenAI一致,两者也都在努力帮助网络维权者解决AI能够找到和利用基础设施的速度所带来的问题。
Carbon的安全补丁生成能力是一个有用的贡献,称 William McKeon-White是福雷斯特的分析师。
称表示:「随着软件脆弱性的不断增长
然而,虽然网络工具模型制造者正在建设中是重要的,但它们也具有限制性。
Anthropic的"玻璃翼"和"OpenAI"的"日出"节目在Google的"仙风"之前就已经出现,只向在其他人之前获得模特儿服务的信任企业开放。
虽然程序旨在防止网络黑客获得销售商最强大的模型,但网络黑客已经能够从Minimax,Alibaba和Z.ai等中国销售商那里获得开放量级模型,这些销售商也拥有强大的网络能力,可用于利用IT系统或用于发现弱点。
因此,前沿模式销售商对其最强大的模式进行如此严格的控制,对企业并不有利,Shimmin 称。
称表示:「我并不认为这些公司有价值,“他们应归功于软件行业更广泛的技术环境,特别是为了发挥其作用,成为解决办法的一部分,而不仅仅是问题。”
另一个问题是边境供应商释放网络模型的苛刻性。
Gemini Carbon在Google Argon之后仅两周就来了,显示 Google试图与Anthropic和OpenAI竞争并赶上。
对于Google,这一举动也发生在其母公司Alphabet于10月28日报告其第三季度收入低于预期之后,据该公司称,这是其AI Mode搜索功能的广告收入更低造成的。 周四
然而,尽管其快速的技术速度显示 Google在AI赛事中仍然能跟上来,但在某些方面对企业客户却无济于事。
Shimmin 称补充说,每一个模型版本都需要仔细的测试,而测试每个模型的时间相对较少,它创造的软件和技术的可靠性和可靠性都较低。
本文由 AI宝库自动抓取并翻译,版权归原作者所有;如需查看原文请点下方链接。
Sponsored by Google Cloud
Choosing Your First Generative AI Use Cases
To get started with generative AI, first focus on areas that can improve human experiences with information.
The model addresses security concerns. Yet its exclusive release means most enterprises won’t be able to test it.
4 Min Read
Getty Images
Google’s Gemini Carbon 4, released just two weeks after Argon 4, reflects a broader problem in the AI market: frontier model providers are releasing models to address the cyber challenges that emerged as AI models grew more powerful.
The tech giant introduced Carbon on Oct. 28 as its strongest model, with long-horizon capabilities and cyber defense capabilities.
The model finds vulnerabilities, exploits them and patches them. It is currently available only to cyber defenders, but Google will soon roll it out to partners in its Fairwind Program. The initiative gives certain organizations in fields such as government, healthcare and telecommunications early access to Google frontier models.
The release highlights how the top U.S. generative AI developers, Google, OpenAI and Anthropic, are now releasing models focused on tackling the growing challenges facing the cybersecurity industry as AI models become increasingly smarter and more powerful. “[Carbon is] reflective of what everyone is really concerned about right now in the market,” said Bradley Shimmin, an analyst at Futurum Group.
Shimmin added that recent discoveries about vulnerabilities in PHP, or Hypertext Preprocessor, an open source programming language used for web development, uncovered fragile points in key internet infrastructures that can be discovered by AI and exploited by AI.
On October 21, the PHP Foundation released emergency security patches indicating a flaw in the programming language that could enable hackers to take control of web servers. Researchers found the vulnerabilities using OpenAI GPT-5.6 Sol and Gemini 4 Argon.
While AI proved effective in discovering and quickly fixing a security hole, recent discoveries have shown that AI models have also been used to attack major infrastructure. For instance, Bloomberg reported that foreign state actors have been using Claude Code to target government infrastructure. In another incident, an Accenture contractor gave the Claude agent access to their login credentials. The agent bypassed secure networks and ran autonomously for two months, sending sensitive unclassified information to a third-party website before it was detected.
“Our infrastructure is much more fragile than we would have liked to believe because AI can stress test that infrastructure at scale and at speeds that we just don’t have the tooling to deal with as an industry,” Shimmin said.
He added that even as cybersecurity defenders move to fix the vulnerabilities, they’re finding more problems faster than they can fix them.
“That’s the challenge Carbon’s trying to hit at,” Shimmin said.
Therefore, Google’s strategy is to align its capabilities with those of Anthropic and OpenAI, both of which are also working to help cyber defenders address the problems posed by the speed at which AI can find and exploit infrastructure.
Carbon’s security patch generation capabilities are a useful contribution, said William McKeon-White, an analyst at Forrester.
“Those are going to be widely needed with the growing software vulnerability wave that’s ongoing,” he said.
However, while the cyber tools model makers are building are important, they are also restrictive.
Anthropic’s Glasswing and OpenAI’s Daybreak programs, which came before Google’s Fairwind, are open only to trusted enterprises that gain access to models before anyone else.
Although the programs are meant to prevent cyber hackers from gaining access to vendors’ most powerful models, cyber hackers already have access to open-weight models from Chinese vendors such as Minimax, Alibaba and Z.ai, which also have powerful cyber capabilities that can be used to exploit IT systems or used to find vulnerabilities.
So, the frontier model vendors placing such strict controls on their most powerful models are not beneficial for enterprises, Shimmin said.
“I don’t think that there’s any value in these companies trying to gatekeep for that technology,” he said. “They owe it to the broader technology landscape in the software industry in particular to do their part, to be a part of the solution, not just the problem.”
Another problem is the cadence at which frontier providers are releasing cyber models.
Gemini Carbon comes just two weeks after Google Argon, which shows Google’s attempt to compete with and catch up to Anthropic and OpenAI.
For Google, the move also comes after its parent company, Alphabet, reported on Oct. 28 that its third-quarter revenue was less than anticipated - a decline caused by lower ad revenue from its AI Mode search feature, according to the company. The poor earnings report caused Alphabet’s shares to drop by 12.6% on Thursday.
However, while its rapid technological pace shows Google can still keep up in the AI race, in some respects it is unhelpful for enterprise customers.
“It’s certainly getting harder for companies to keep up with this pace of iteration,” Shimmin said, adding that each model version requires careful testing and, with relatively little time to test each model, it’s creating less reliable and less secure software and technology.”
Auto-fetched and translated by AI Gem Box. All rights belong to the original author.