The AI vs AI Battle for the Internet — 文稿

M10:00

昨天，Anthropic 发布了 Claude Duet，这是他们对 GrokBot、Meta Muse 和 OpenAI's Dot 的回应。

Yesterday, Anthropic announced Claude Duet, their answer to GrokBot and Meta Muse and OpenAI's Dot.

然而，不知为何，Duet 并不是我们本期主要节目的焦点。

And yet somehow Duet is not the focus of our main episode.

这怎么可能呢？

How could that possibly be?

简而言之，这是因为我们现在正经历着一个可能最终被视为网络安全两个截然不同时代之间关键过渡时刻的时期。

Well, in short, it's because right now we are living through what may ultimately be seen as a key transitional moment between two very different eras of cybersecurity.

一个时代是长期规范得以维持，甚至漏洞和挑战都是可控的；而另一个更新的时代则是 AI 对 AI，比拼谁能更好地协调。

One where long-term norms held and even exploits and challenges were manageable, and the other newer era where it's AI versus AI and a battle for who can coordinate best.

《AI Daily Brief》是一个每日播客和视频节目，内容是关于 AI 领域最重要的新闻和讨论。

The AI Daily Brief is a daily podcast and video about the most important news and discussions in AI.

The AI Daily Brief 是一个每日播客和视频，内容涵盖 AI 领域最重要的新闻和讨论。

Alright friends, quick announcements before we dive in.

M10:57

今天我们从一个故事开始，这个故事在几乎任何一天的这个节目中都会是绝对的主角，而且实际上通常会是那种专门作为主要主题的剧集。

And we kick off today with a story that on almost any day on this show would absolutely be the main, and in fact would usually be a main-only type episode.

Anthropic 已经加入了个人代理的市场，推出了他们对 Muse/Dot/Grokbot 的独特版本，并将其命名为 Claude Duet。

Anthropic has joined the personal agent market with their own twist on Muse/Dot/Grokbot, and they're calling it Claude Duet.

今天对我们来说它只是简要介绍的两个原因是：第一，现在互联网上存在大量网络安全问题，无论是具体情况还是它们暗示的未来趋势，都相当不容忽视。

The two reasons that today for us it's just a brief headline introduction are that one, the massive slate of cyber issues going around the internet right now is fairly unignorable, both in the specifics and in what they allude to for the future.

第二，我正在制作一个完整的“周日长读”剧集，会更深入地探讨 Claude Duet，以及我目前如何使用它和它的竞争对手，以及我发现的情况。

And secondly, I'm working on a full-length Long Read Sunday episode which is going to go much deeper into Claude Duet and exactly how I'm using it and its competitors and what I'm finding so far.

所以周日再来查看吧。

So come back on Sunday to check that out.

目前看来，Anthropic 可能不出意料地瞄准了个人代理市场的专业和小型企业方面，他们的主要差异化似乎在于注重主动性。

For now, it appears that Anthropic is perhaps unsurprisingly aiming at the professional and small business side of the personal agent market, with their main differentiator seeming to be a focus on being proactive.

在描述核心功能时，他们写道：每天早上，Duet 会给你发送一份简短摘要，列出你连接的应用中最重要的内容。

Describing the core functionality, they wrote: each morning Duet sends you a short brief on the most important items across your connected apps.

在一天中，它会持续关注这些应用，并且只在需要你关注的事情上给你发消息。

Throughout the day, it keeps tabs on those apps and messages you only when something needs your attention.

你还可以交给它各种类型的任务，从简单的管理任务（如安排会议）到更复杂的任务（例如使用数十种工具构建仪表板、创建财务或销售预测、制作原型和构建 web 应用）。

You can also hand it tasks of all shapes, from simple administrative tasks like scheduling meetings to more complex ones such as building dashboards with dozens of tools, creating financial or sales forecasts, prototyping and building web apps.

除了主动的方式之外，Claude Duet 还拥有人们目前对现有代理所期望的所有功能。

Besides the proactive approach, Claude Duet has all of the features that people have come to expect from the current crop of agents.

Duet 拥有自己的虚拟机、持久记忆和全套连接器。

Duet has its virtual machine, persistent memory, and a full suite of connectors.

Anthropic 还强调了对安全性的关注。

And Anthropic also emphasized a focus on safety.

Duet 会在执行重大操作（如付款或删除文件）之前请求明确许可。

Duet will ask for explicit permission before taking major actions like making a payment or deleting files.

Anthropic 还创建了他们所谓的新的专用分类器和安全系统提示，用于检查每条消息并防止敏感信息泄露。

Anthropic has also created what they call a new dedicated classifier and safety system prompt that checks each message and guards against leaks of sensitive information.

目前，Duet 作为研究预览版本推出，你不能直接决定使用它。

Right now, Duet is being rolled out as a research preview, and you can't just decide to use it.

你必须加入等待名单。

You have to get on a waitlist.

Anthropic 警告说，这是一个早期版本，可能存在一些问题，例如误读对话线程或对紧急程度的判断不准确。

Anthropic warned that this is an early version, which might have some issues like misreading threads or miscalibrating what's urgent.

他们还警告说，它在个人事务（如预订 tickets）方面不如其他代理，因为它很大程度上专注于工作任务。

And they also warned that it won't be as capable of personal errands like booking tickets as other agents because of the extent to which their focus is on work tasks.

总的来说，社区对此反应兴奋，但并不意外。

In general, the community treated this with excitement, if not surprise.

对许多人来说，正如 Dan McAteer 所总结的，重大且直接的差异化并不在于主动性，甚至也不一定在于对工作任务的关注。

And for many, as summed up by Dan McAteer, the big and immediate differentiator wasn't anything about the proactivity or even necessarily its focus on work tasks.

而是它建立在 Opus 5.5 之上。

It was the fact that it was built on Opus 5.5.

有少数人，比如 Chubby，对于 Anthropic 追求个人代理感到惊讶。

There were a few folks like Chubby who were surprised to see Anthropic pursuing a personal agent.

他基本上说他不确定这是针对谁的，但我认为，如果认为个人代理只是用于个人用途，那可能是一个分类错误。

He basically said that he wasn't sure who the target was for this, but I think that that might be a category error in thinking that personal agents are just going to be for personal uses.

在我看来，大家似乎多多少少都意识到，虽然我们既有工作也有个人生活，但这两者的边界其实是相当模糊的。

It seems to me that there is a bit of a recognition that even though we have work and personal lives, the boundaries of those things are fairly permeable.

而谈到所谓的个人代理，目前看来，各大实验室押注的是——虽然我们可能会更倾向于那个更贴合我们特定使用场景的产品，但它们必须得能做到我们想让它做的所有事情。

And when it comes to these so-called personal agents, right now it seems like the labs are betting that while we might gravitate towards one that has our particular use cases emphasized, they just have to be able to do everything that we might want them to do.

Signal 总结得挺好：现在几乎所有主要 AI 公司都有了个人代理产品，除了 Google。

Signal summed it up this way: Pretty much every major AI company now has a personal agent product except Google.

Meta 有 Muse，Anthropic 有 Duet，OpenAI 有 Dots，xAI 有 Grok。

Meta has Muse, Anthropic Duet, OpenAI Dots, xAI Grok.

慢慢地，竞争重心正在从谁的模型最聪明，转向谁拥有与用户的持久关系。

Slowly but surely, the competition is shifting from who has the smartest model to who owns the persistent relationship with the user.

你之所以看到这种情况，是因为驱动世界上大多数工作流所需的智能水平，可能早在去年底或今年初就已经达到顶峰了。

You're seeing this because we likely reached peak intelligence required to power most of the world's workflows probably earlier this year, if not late last year.

我觉得，这场讨论恰恰说明这个产品类别还处于非常早期的阶段。

Mostly, I think the discussion shows just how nascent this product category remains.

无论是这些东西是不是正确的产品形态，还是它们最重要的交互方式是什么，甚至是核心功能应该有哪些，都完全没有共识。

There is nothing even approaching consensus on whether these things are the right form factor or what their most important modes of interactions are or what even the essential features are.

大家对于最终会有一个还是多个代理、最重要的区分点是什么，也是各执一词。

People disagree around whether we'll have one or many and what the most important distinguishers will be.

我知道，在我这段时间使用这些个人代理之后，我并不百分百确定它们最终会成为整个产品组合中必不可少的一部分。

I know that subsequent to my time using these personal agents so far, I'm not 100% convinced that they're going to ultimately be an essential part of the portfolio.

不过就像我说的，周日我会更深入地聊这个话题。

But like I said, I'm gonna get a lot deeper into that on Sunday.

最后再提一句关于 Duet 的，供那些一直在关注的人参考。

And I guess a last note on Duet for those who are keeping track.

如果让我来赌的话，我觉得这是 Anthropic 在冲刺 IPO 之前打出的组合拳的第一招，至少从产品角度来看是这样。

If I were a betting man, I think this is part 1 of a 1-2 punch heading into the IPO, at least from a product perspective for Anthropic.

先发布一个应对市面上所有个人代理的产品，然后再推出一个新模型，让所有人瞬间觉得自己落后了一大截。

Release your answer to all the personal agents floating around, and then give it a new model which makes everyone feel just so far behind.

换句话说，这可能只是 Fable 5.5 的前奏。

In other words, maybe this is just prelude to Fable 5.5.

接下来，还是关于代理这个话题。与其他一些企业不同，Walmart 决定欢迎个人代理进入他们的平台。

Next up, staying on the theme of agents, contra to some other businesses out there, Walmart has decided to welcome personal agents onto their platform.

最近几周，美国企业界在个人代理代表所有者与服务互动这件事的风险上，出现了明显的分歧。

Recent weeks have seen corporate America divided on the risks of personal agents interacting with services on their owners' behalf.

Shopify 当然是明确支持，而 Amazon、JP Morgan 和 Bank of America 则明确反对。

Shopify was of course an emphatic yes, while Amazon, JP Morgan, and Bank of America were a clear no.

需要注意的是，这几家公司反对的理由其实有点不太一样。

It should be noted that the reason for the nos between those companies was a little bit different.

JP Morgan 和 Bank of America 主要考虑的是风险——代理会不会用人们的钱做一些不该做的事。

JP Morgan and Bank of America are thinking about risk in terms of agents doing something with people's money that they shouldn't.

而 Amazon 更多是关注竞争风险。

While Amazon is focused more on competitive risk.

从这个角度看，Walmart 允许第三方代理接入，还真的挺让人意外的。

In that light, Walmart allowing third-party agents is kind of a surprising move.

这家零售巨头很早就开始采用 AI，他们战略的核心支柱之一就是自有购物代理 Sparky。

The retail giant was very early to AI adoption, and one of the core pillars of their strategy was Sparky, their proprietary shopping agent.

本月早些时候，Walmart 表示，使用 Sparky 的顾客，订单金额比不用代理的在线购物者高出 40%。

Earlier this month, Walmart said customers who used Sparky had order values 40% higher than non-agentic online shoppers.

不过现在看来，Walmart 是想要推动代理购物这件事，而且他们并不太在意顾客用的是哪个代理。

Still, it seems now that Walmart wants to encourage agentic commerce, and they don't particularly care which agents their customers are using.

从下个月开始，顾客可以为自己的个人代理设置一个关联账户，并配置消费限额，有点类似于儿童账户的运作方式。

As of next month, customers will be able to set up a linked account for their personal agent with configurable spending limits, kind of similar to how a child's account might work.

从下个月开始，顾客可以为自己的个人代理设置一个关联账户，并配置消费限额，有点类似于儿童账户的运作方式。

As of next month, customers will be able to set up a linked account for their personal agent with configurable spending limits, kind of similar to how a child's account might work.

除了支持第三方代理之外，Walmart 的新政策还包含了一大段详细的条款和条件，这些内容可能会成为更安全的代理购物模式的模板。

Aside from supporting third-party agents, Walmart's new policy included lengthy terms and conditions that could become a template for safer agentic shopping.

Walmart 规定，代理不能采取超出购物者意图的行动，而且代理不能修改顾客的支付方式。

Walmart included rules that an agent must not take actions beyond what the shopper intended, and that agents can't modify a customer's payment methods.

Walmart 还要求默认情况下所有购买都需要经过批准，并且表示会封禁不遵守其指南的代理。

Walmart will require purchases to be approved by default, and said they would ban agents that don't comply with their guidelines.

不过，对于合规的 agent，Walmart 表示，即使 agent 犯了错，agent 购物也能享受退货政策。

However, for compliant agents, Walmart said agentic purchases would have access to the returns policy even if an agent makes a mistake.

我们又一次发现，agentic commerce 还处于非常非常早期的阶段。我觉得现在就想对它未来的发展下结论，即使不是不可能，也是非常难的。

Once again, we find ourselves in incredibly early days for agentic commerce, and I think trying to make definitive statements now about how this is going to play out is very hard if not impossible.

不过，早期证据表明，对于正在使用个人 agent 的人来说，agentic commerce 确实是一个大家在探索的早期用例。

Still, early evidence suggests that for those who are using personal agents, agentic commerce does seem to be an early use case that people are exploring.

在周三晚上的财报电话会议上，Meta 表示，活跃的 Muse 用户中有四分之一在用这个 agent 购物。

During Wednesday night's earnings call, Meta said that one-quarter of active Muse users are using the agent for shopping.

他们的平均购买金额是 200 美元，这让一直关注这个领域的电商老手们都很惊讶。

The average value of their purchases is $200, which surprised even the e-commerce veterans who have been paying attention to the space.

Mark Zuckerberg 说，Plaid 告诉他们，他们在自己的连接器上看到的这种活跃度，以前在任何其他服务上都没有见过。

Mark Zuckerberg commented, Plaid told us that they hadn't seen activity like they're seeing with their connector on any other service before.

从这个角度看，Walmart 的策略就变得清楚一些了。

In that light, Walmart's strategy begins to look a little bit clearer.

如果 agentic 购物的早期用户都是非常有价值的客户，那 Walmart 就是想让他们尽情买。

If the early adopters of agentic shopping are very valuable customers, Walmart just wants to let 'em shop.

说到 Meta，他们宣布了一种新的无投票权股票，来为下一阶段的 AI 建设提供资金。

Speaking of Meta, the company has announced a new class of non-voting stock to help fund the next leg of their AI buildout.

这个公告和第三季度财报一起发布，财报里数据中心预算有一个非常小的上调。

The announcement came alongside those same 3rd quarter earnings, which featured a very minor upwards revision to their data center budget.

Meta 现在预计今年的支出在 1350 亿到 1450 亿美元之间，下限从 1300 亿美元上调了。

Meta now expects to spend between $135 billion and $145 billion this year, adjusting the low end up from $130 billion.

新股票将在 1 月开始交易，这样 Meta 就能在不稀释 Mark Zuckerberg 投票控制权的情况下，通过卖股权来融资。

The new stock will begin trading in January and allows Meta to raise funds by selling equity without diluting Mark Zuckerberg's voting control of the company.

CFO Susan Li 在财报中写道，在行业 AI 转型的过程中，要竞争、维持增长、扩展基础设施、推进新的战略举措，所需的投资规模非常庞大。

CFO Susan Li wrote in the earnings report, the scale of investment required to compete, sustain growth, expand infrastructure, and pursue new strategic initiatives amidst the AI transformation taking place in the industry is significant.

在财报电话会议上，Li 补充说，新一类股票将，原话是，‘扩大我们的融资工具，并让我们有灵活性去投资于 AI 驱动的、我们业务每个部分所呈现出的空前势头。’

During the earnings call, Li added that the new class of stock will, quote, expand our funding tools and give us flexibility to invest behind the unprecedented momentum we're seeing across every part of our business driven by AI.

Meta 为什么会转向用股权而不是债务来资助数据中心建设，有几个原因。

There are a few reasons why Meta would pivot to funding their data center buildout with equity rather than debt.

有人认为，这标志着债券市场在 AI 债务方面已经完全到顶了。

Some thought that this was a sign that the bond market is completely tapped out on AI debt.

但当然，也可能是 Meta 认为这是未来的一种可能性，而不是现在的实际情况，所以想提前对冲。

But of course, it also might be that Meta sees that as a possibility moving forward, rather than a current-state condition, and wants to hedge against it.

还有人指出，Meta 有 9000 亿美元的负债，其中包括 3500 亿美元的不可取消的数据中心合同。

Others noted that Meta has $900 billion in liabilities, including $350 billion in non-cancelable data center contracts.

这大致可以衡量未来十年的支出，但其中目前只有大约 830 亿美元是已发行的长期债券。

That's a rough gauge of spending over the coming decade, but only about $83 billion of that total is currently on issued long-term bonds.

也许如此大规模的建设，意味着他们没法全靠债务来融资。

Perhaps the scale of the buildout suggests they won't be able to fund it all with debt.

最终，用奥卡姆剃刀来回答——或者，取决于你对 Zuckerberg 的立场，也可以说是最宽容的解读——就是 Meta 在动用所有可用的资本池，给自己留足后路。

Now ultimately, the Occam's razor answer, or I guess the generous read depending on your position on Zuckerberg, is that Meta is tapping all available pools of capital and keeping their options open.

发行股票是一个很深的资本池，只要 Meta 不太担心稀释现有股东。

Issuing stock is a deep pool of capital as long as Meta isn't too concerned about diluting existing shareholders.

财报附带的 Moelis 财务规划建议说，Meta 在未来几年无论在任何情况下，都需要筹集数千亿美元。

Financial planning advice from Moelis, which was attached to the earnings report, said Meta would need to raise several hundred billion dollars over the coming years in any scenario.

他们指出，即使发行有投票权的股票，Meta 在不把 Mark Zuckerberg 的投票权稀释到 50% 以下的前提下，仍然最多可以筹集 7000 亿美元。

They noted that if they did issue voting stock, They could still raise as much as $700 billion without diluting Mark Zuckerberg's vote below 50%.

有意思的是，Meta 的股票在隔夜交易中上涨，这说明股东们目前愿意接受一些稀释。

Interestingly, Meta stock was up in overnight markets, suggesting shareholders are willing to deal with some dilution for now.

这对建设阶段意味着什么还有待观察，但这是另一个重要信号。

What this means for the stage of the buildout remains to be seen, but it is another important signal.

目前的计划是，除非周五发生什么疯狂的事情，否则我会更深入地探讨我认为真正最令人担忧的泡沫信号。

The current plan, barring some crazy thing happening on Friday, is a much deeper dive into what I think are the actual most concerning bubble signals.

所以如果你感兴趣，明天再来。

So if you're interested in that, come back tomorrow.

不过，今天的新闻头条就到这里。

For now, though, that is going to do it for today's headlines.

接下来是主体节目。

Next up, the main episode.

M112:41

欢迎回到AI每日简报。

Welcome back to the AI Daily Brief.

一段时间以来，在关于AI对世界影响的所有问题中——它会在多大程度上改变工作，是否会颠覆工作岗位，可能带来什么样的失控社会风险——已经很清楚。

It's been clear for some time that among all the questions about AI's impact on the world, how much it was going to change work, whether it was going to disrupt jobs, what sort of runaway societal risks it might have.

一个相当无可争议的结论是，它将对网络安全和网络基础设施产生巨大影响。

One of the fairly inarguable conclusions has been that it was going to have a dramatic impact on cybersecurity and cyber infrastructure.

2026年的一个开创性时刻实际上是Anthropic宣布Project Glasswing，以及他们强大的新模型Mythos，我们最终会在Fable中获得它的消费者版本。

One of the seminal moments of 2026 was in fact when Anthropic announced Project Glasswing, and their powerful new model Mythos, which we would eventually get a consumer version of in Fable.

Glasswing是在四月宣布的，在宣布的帖子中他们写道，我们成立Project Glasswing是因为我们观察到Anthropic训练的一个新前沿模型具有我们认为可以重塑网络安全的能力。

Glasswing was announced in April, and in their announcement post they wrote, we formed Project Glasswing because of capabilities we've observed in a new frontier model trained by Anthropic that we believe could reshape cybersecurity.

AI模型已经达到了编码能力的水平，使得它们在发现和利用软件漏洞方面可以超越除最熟练人类之外的所有人。

AI models have reached a level of coding capability where they can surpass all but the most skilled humans at finding and exploiting software vulnerabilities.

作为宣布的一部分，他们指出，他们的Mythos预览版本已经发现了数千个高安全漏洞，包括他们说，在每个主要操作系统和网络浏览器中都有一些。

As part of the announcement, they noted, that their preview version of Mythos had already found thousands of high-security vulnerabilities, including, they said, some in every major operating system and web browser.

鉴于AI进步的速度，Anthropic写道，这种能力将很快扩散开来，可能超出那些致力于安全部署的行动者的控制范围。

Given the rate of AI progress, Anthropic wrote, it will not be long before such capabilities proliferate, potentially beyond actors who are committed to deploying them safely.

对经济、公共安全和国家安全的影响可能很严重。

The fallout for economies, public safety, and national security could be severe.

现在，Glasswing的运作方式是它将Mythos的访问权交给了一小部分政府和公司行动者，以便开始防御性地利用其能力，尝试在漏洞可能被利用之前解决它们。

Now, the way that Glasswing worked was that it gave access to Mythos to a small handful of government and corporate actors, in order to start using its capabilities defensively to try to address possible exploits before they could be exploited.

然而，随着这项工作的进行，公司和整个社会开始不得不应对的事件仍然在加速出现。

And yet, as that work has been ongoing, there has still been an acceleration in the incidents that companies and societies at large are starting to have to respond to.

其中最知名的，也是AI和技术领域之外影响最大的，当然是Hugging Face事件，在这一事件中，来自OpenAI的一群智能体突破了围栏，获取了Hugging Face系统的访问权限。

The best known of these, and the one that has had the most influence outside of the AI and tech space, is of course the Hugging Face incident, in which a fleet of agents from OpenAI broke containment to get access to Hugging Face's systems.

然后在本周早些时候，这一周实际上是以对OpenCode的攻击开始的，攻击进入了大约1.5%的OpenCode用户的账户，并开始在各种AI公司的API上消耗费用。

And then earlier this week, the week actually kicked off with an attack on OpenCode, that got into the accounts of about 1.5% of the users of OpenCode and started running up bills on various AI companies' APIs.

然而，所有这些现在似乎只是前奏。

This all now, however, appears to be simply prelude.

周三，安全研究人员披露了PHP中的一个漏洞，该漏洞可能影响互联网上多达70%的网站和网络应用。

On Wednesday, security researchers disclosed a vulnerability in PHP that could affect as much as 70% of websites and web apps on the internet.

对于不深入了解计算机史和不是开发者的听众，这里提供一些背景：PHP是一种编程语言，它运行着支撑互联网的后端服务器。

By way of background for those who aren't deep in computer history and aren't developers yourselves, PHP is the programming language that runs the backend servers that power the internet.

它自1990年代初就存在了，虽然有些人认为它有点过时，但它仍然与我们目前使用的互联网深深交织在一起。

It's been around since the early 1990s, and while some believe it is a little archaic, it is still deeply enmeshed in this internet that we currently use.

这个漏洞大约两个月前被一位在California的安全研究员使用GPT-5.6发现，同时Wiz团队也独立发现了它。

The vulnerability was discovered around 2 months ago using GPT-5.6 by a security researcher at California and independently by the team at Wiz.

在随后的几个月里，OpenAI一直与PHP的维护者、Wiz、Cloudflare和其他合作伙伴协调，在披露之前准备缓解措施和补丁。

In the intervening months, OpenAI has been coordinating with PHP's maintainers, Wiz, Cloudflare, and other partners to prepare mitigations and a patch ahead of disclosure.

这个编号为PHP2Shell的漏洞，基本上是网络安全防御者的噩梦。

The vulnerability, dubbed PHP2Shell, is basically the worst nightmare for cyber defenders.

它允许威胁行为者无需登录就能控制后端服务器并执行远程代码。

It allows a threat actor to take control of a backend server without logging in and perform remote code execution.

基本上，利用这个漏洞，黑客可以访问并对任何运行PHP的服务器做任何事情。

Essentially, using this vulnerability, a hacker can get access to do anything with any server running on PHP.

关键是，这不只是一个影响旧版本PHP的漏洞。

Critically, this wasn't a vulnerability that only impacted older versions of PHP.

即使是运行最新版本服务器软件的网站也很脆弱。

Even sites running the latest versions of server software were vulnerable.

Volker Dusch，一位在维护PHP的非营利组织工作的安全工程师，表示这是该编程语言十多年来面临的最严重的安全问题。

Volker Dusch, a security engineer at the nonprofit that maintains PHP, said that this was the most severe security issue the programming language has faced in over a decade.

他将其与Heartbleed相比较，Heartbleed是OpenSSL加密库中的一个关键漏洞，曾在2014年引发全球修补行动。

He compared it to Heartbleed, a critical vulnerability in the OpenSSL cryptographic library that led to a global patching effort back in 2014.

在一篇讨论该漏洞的博客文章中，OpenAI写道，据我们所知，Frontier AI在攻击者之前发现了这些漏洞，为维护者和安全提供商打开了一个防守窗口，以便在披露之前准备修复和保护措施。

In a blog post discussing the vulnerability, OpenAI wrote, to our knowledge, Frontier AI found these vulnerabilities before attackers did, opening a defender's window for maintainers and security providers to prepare fixes and protections ahead of disclosure.

从技术上讲这是真的，并且立即提供了错误修复。

That's technically true, and a bug fix was made available immediately.

然而，似乎关于该漏洞利用的知识在披露前大约10小时就开始传播，是在任何人能更新服务器之前。

However, it seems that knowledge of the exploit spread around 10 hours ahead of disclosure, before anyone could update their servers.

许多政府和商业网站昨天上午作为预防措施将网站下线。

Many government and commercial websites took their sites offline as a precaution yesterday morning.

情况很严重，以至于NSA发布了一份公告，建议各组织将系统离线，直到所有补丁到位。

The situation was serious enough that the NSA issued a bulletin recommending that organizations take their systems offline until everything is patched.

FBI Cyber Division也加入，要求各组织报告入侵事件。

The FBI Cyber Division joined them, asking for organizations to report intrusions.

这种程度的担忧，我通常几乎本能地持怀疑态度。

Now this is the type of concern that I tend to have an almost reflexive skepticism towards.

正如AI记者Cameron Wilson所说，今天网络上真是“天要塌了”的感觉。

As AI reporter Cameron Wilson put it, real sky is falling vibes on the web today.

然而，根据那些比我了解得多得多的人的反应，这事儿看起来像是真的。

And yet, based on the responses of people who know a heck of a lot more about this than I do, this one kinda seems like the real deal.

企业家Breck Units写道，“伙计们，这个PHP漏洞很糟糕。”

Entrepreneur Breck Units wrote, guys, this PHP bug is bad.

真的很糟糕。

Real bad.

如果你还不害怕，那你应该害怕了。

If you're not afraid yet, you should be.

我只能代表我们的初创公司，但在notebooks.com，我们已经看到100%的cookies暴露，整个源代码被盗，黑客在他们自己的服务器上篡改我们的网站，创始人人肉搜索，重要法律文件泄露。

I can only speak for our startup, but already at notebooks.com, we've seen 100% of our cookies exposed, entire source code stolen, hackers defacing our site on their own servers, founders doxxed, important legal docs leaked.

前情报官员转行网络安全企业家的Mike Shelby写道，“我的CTO向我保证，我们的平台不受这个最新的PHP zero-day vulnerability事件的影响。”

Former intelligence officer turned cybersecurity entrepreneur Mike Shelby wrote, my CTO assures me that our platform has no risk from this latest PHP zero-day vulnerability thing.

但他补充说，“我们现在处于可能20年来对互联网最大的破坏性事件前的平静期。”

However, he adds, we are in the calm before what is likely to be the biggest destruction event to the internet in 20 years.

顺带一提，他本人就是一名黑客。

He's an actual hacker, by the way.

他继续说，“这是我见过的最大的问题。”

He continues, biggest issue I've ever seen.

大约70%的网站存在漏洞，可能已经被入侵，还没有人知道。

Around 70% of websites are vulnerable and may have already been compromised without anyone knowing it yet.

所以明天应该会很有趣。

So tomorrow should be fun.

投资人Charles Reed写道，“我非常担心我们正处于一场全球网络安全事件的早期阶段，而我们还没有完全意识到它的规模。”

Investor Charles Reed wrote, I'm pretty concerned we're in the early stages of a global cybersecurity incident and we just don't fully realize the extent of it yet.

AI工程师Nick Dobos转发了那条并说，“几十甚至成千的AI agent swarms，比Hugging Face事件还大，正在攻击大约半个互联网。”

AI engineer Nick Dobos reposted that and said, dozens if not thousands of AI agent swarms bigger than the Hugging Face incident are hacking about half the internet right now.

然后他将数字修正到数百万，因为他看到Cloudflare CEO Matthew Prince的帖子，其中说，“在P2P2Shell公开前的10小时内，在整个Cloudflare网络上我们看到了数千次利用尝试。”

He then modified that number to millions, after seeing a post from Cloudflare CEO Matthew Prince who said, in the 10 hours before P2P2Shell was announced, across the Cloudflare network we saw thousands of attempts to exploit it.

在公告发布后的45分钟内，这个数字激增到数万，2小时内到数十万，现在到了数百万。

That jumped to tens of thousands in the 45 minutes post-announcement, hundreds of thousands within 2 hours, and millions now.

现在，在有些人看来，这是不可避免的。

Now, to some, this was inevitable.

沃顿商学院教授Ethan Mollick写道，“这是一个可见的信号，正是AI业内人士至少从模型发布以来一直警告的：攻击和防御以非人的速度加速，与需要对其作出反应的非常人性化的系统相互作用。”

Wharton professor Ethan Mollick wrote, a visible sign of what AI insiders have been warning about since at least the model's release: acceleration of attack and defense at inhuman speeds, interacting with the very human systems that need to react to them.

网络安全正在发生的事情，正是那些对AI能力感到恐慌的理性主义者很久以前就预测过的。

What's happening with cybersecurity is what rationalists freaking out about AI capabilities had been predicting for a long while.

这就是“Great Hackening事件”，而且还会更糟。

It's the Great Hackening, and it's going to get worse.

现在，这有点超出本节目的范围，但我认为那种描述有点不诚实，因为这与那个群体一直在警告的主要问题——或者说多个主要问题——还差得远；而且我认为可以合理论证，多年来对这些模糊的x-risk场景的关注实际上在很多情况下分散了对当前更紧迫问题（如这些网络安全问题）的注意力；但我也会说，对此最好的反驳是，关心一件事并不意味着你不能关心另一件事；所以我们将回到我们当前的重点，即现在正面临的问题。

Now, it's a bit beyond the scope of this show, but I find that particular characterization a little disingenuous, given that this isn't even close to the main thing, or main things, that that group has been warning about, and I think one could make a reasonable argument that all of the focus on these vague x-risk scenarios for years in advance have in fact in many cases distracted from much more current issues like these cybersecurity issues, but I would also say that the best counterpoint to that is that being concerned about one thing does not mean you don't get to be concerned about something else, and so we'll return back to our focus on the issues that are here right now.

在我们这个小圈子之外，反应更可能是介于不知情、不知所措或漠不关心之间。

Outside of our little world, the response is more likely to be somewhere between uninformed, overwhelmed, or just blasé.

独立创业者Peter Levels写道，“我通知了一个在大型科技公司工作的朋友关于PHP漏洞的事，因为他们整个基础设施都运行在PHP上。”

Solopreneur Peter Levels wrote, I notified a friend working at a big tech corporate about the PHP vulnerability as their entire infrastructure runs on PHP.

他回答说，“谢谢，我过几天打上补丁吧，现在我不在办公室。”

He answered, Thanks, I'll try to patch it in a few days, as I'm out of office right now.

他继续说，“而这是一家现代科技公司。”

And this is a modern tech company, Levels continued.

想象一下那些运行PHP的传统公司。

Imagine the traditional companies running PHP.

然而，即使对那些不持漠不关心态度的公司来说，这也代表了巨大的挑战。

Even for those companies not taking a blasé attitude, however, this represents an incredible challenge.

再说一次，Ethan Mollick写道，与我交谈的公司都在为需要频繁打补丁而苦恼，因为AI防御系统会在其他AI即将发起的网络攻击浪潮到来之前发现问题。

Again, Ethan Mollick writes, Companies I talk to are struggling with the rate of patches they need to do thanks to AI defenses finding issues before the inevitable wave of incoming cyberattacks by other AIs.

现在消费者也将面临同样的情况，所有东西都要频繁快速地更新。

Now consumers are going to have the same experience of getting everything updated often and fast.

现在，有些人对于这个特定漏洞的披露方式提出了疑问。

Now, one question some had was around the disclosure method of this particular exploit.

Maple AI首席技术官Anthony Ronning写道，如果他们针对PHP漏洞已经研究了两个多月，那为什么披露和部署策略却如此糟糕？

Maple AI CTO Anthony Ronning wrote, if they've worked on the PHP vulnerability for over 2 months, then why has there been such a poor disclosure and rollout strategy?

这基本上就是一个策略，引用一下，‘24小时内，你们全完了。’

It's basically been a strategy of, quote, in 24 hours, you're all screwed.

这可能是个愚蠢的问题，但考虑到上周的发现，而且漏洞在12个多小时前就开始泄露了，为什么PHP补丁没有在漏洞或概念验证完全泄露时立即准备好发布？

This might be a stupid question, but given the discovery last week and that it started leaking 12+ hours ago, why weren't the PHP patches ready to be dropped as soon as the vulnerability/POC fully leaked?

为什么大家都随意地再等12个小时才打补丁？

Why is everyone okay arbitrarily waiting another 12 hours to patch?

我不是安全专家，但告诉黑客世界有一个超级巨大的末日级PHP漏洞，并且给他们一天时间搞清楚并尽可能造成破坏，然后才发布修复，这似乎是个坏主意。

I'm no security expert, but telling the hacking world there's a mega huge apocalyptic exploit for PHP and giving them a day to figure it out and do as much damage before they release the fix seems like a bad idea.

难道不能先发布更新，一天后再解释它是什么吗？

Couldn't they release the update, then after a day explain what it is?

现在，根据我从那些比我更了解情况的人那里读到的描述，我的理解是，补丁本身会让漏洞变得明显。

Now, my understanding from reading accounts from people who, again, know a lot more than I do about this, is that the patch itself makes the exploit obvious.

所以担忧在于，一旦发布补丁，他们实际上也相当于让漏洞在现实世界中公开了。

So the concern was that as soon as they released the patch, they were also essentially making the exploit known in the wild.

这就是为什么NSA警告所有人要在披露之前关闭网站。

This is why the NSA warned everyone to take their sites down ahead of the disclosure.

真正的黑客世界不是问题所在。

The real hacking world isn't the issue.

他们可能不会针对我们大多数人。

They probably won't target most of us.

发布漏洞/补丁会释放出一波脚本小子风暴，他们会扫描并入侵他们发现的一切。

Releasing the exploit/patch unleashes a storm of script kiddies that will scan and breach everything they find.

他们试图让每个人都准备好，在补丁发布的那一刻就进行更新。

They tried to get everyone ready to update the moment it lands.

现在，在讨论更广泛的影响之前，有些人在感叹这个特殊漏洞本身可能留下的遗产。

Now, before we get into broader implications, some are lamenting what might be the legacy of this particular exploit itself.

Kenny Lauderdale写道：这个PHP漏洞太令人沮丧了，因为将有15年历史的老网站现在会变成丢失的媒体内容。

Kenny Lauderdale writes: This PHP stuff is so depressing because there's going to be 15 years worth of old sites that are going to become lost media now.

网络安全新闻报道账号The International Cyber Digest写道，4chan已变成只读模式，Something Awful也关闭了论坛，美国网站正在为PHP补丁做准备。

Cybersecurity news reporting account The International Cyber Digest wrote, 4chan has gone read-only and Something Awful has shut its forums as American sites brace for the PHP patch.

书签服务Pinboard、游戏发行商Choice of Games、历史网站Damn Interesting以及Explain XKCD百科也都下线了。

Bookmarking service Pinboard, game publisher Choice of Games, history site Damn Interesting, and the Explain XKCD wiki are offline too.

然后，为了强调这类攻击的频率不会受到限制，昨天还看到Railway遭遇了一次重大漏洞攻击。

And then to add to the idea that these types of attacks were not going to be limited in their frequency, Yesterday also saw Railway hit by a major exploit.

Railway是一个AI托管服务，类似于Vercel。

Railway is an AI hosting service similar to Vercel.

在一篇披露帖子中，Railway写道，今天早些时候，Railway检测到涉及存储客户环境变量的系统的异常活动。

In a disclosure post, Railway wrote, earlier this morning, Railway detected anomalous activity involving systems that store customer environment variables.

经过进一步调查，迄今为止的调查表明，一个未经授权的第三方可能访问了加密的环境变量，并且对其中一些变量获取了解密后的内容。

After further investigation, our investigation to date indicates that an unauthorized third party may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents.

环境变量可能包含机密信息，例如API密钥或数据库和注册表凭据。

Environment variables may contain secrets such as API keys or database and registry credentials.

我们认为这是最近一系列针对平台公司的攻击的一部分，目的是破坏AI推理提供商。

We believe this is part of a series of attacks recently targeting platform companies with the aim of compromising AI inference providers.

乍一看，这与上周末的OpenCode漏洞非常相似，那次攻击者也获得了用户API密钥的访问权限，从而能够窃取代币并产生巨额账单。

At first glance, this looks very similar to the OpenCode exploit from last weekend, which again saw attackers gain access to user API keys, allowing the attackers to steal tokens and run up big bills.

与OpenCode的情况类似，Railway建议所有用户轮换API密钥并重置平台上存储的所有环境变量。

Like the OpenCode situation, Railway is suggesting that all users should rotate API keys and roll all environmental variables stored on the platform.

密钥正在被主动消耗，并且他们已经禁用了部署任何东西的功能，所以无法用新的变量进行部署。

Keys actively being drained and they've disabled the ability to deploy anything so can't deploy with new variables.

网络安全领域噩梦般的一天，而且恐怕只会越来越糟。

Nightmare day for cyber, and it's only going to get worse from here, I fear.

来自 OpenCode 的 Dax 回应了 Railway 团队，总结了新常态。

Dax from OpenCode responded to the Railway team and summed up the new normal.

他写道，'我相信你们在这方面都比我做得好，但这里有一些我们看到的，如果能有所帮助的话。'

He wrote, I'm sure you're all better than me at this, but just some of what we've seen if it helps.

他们不会停止。

They're not going to stop.

它会变得越来越复杂，他们会攻击你系统的每一个方面和你的所有员工。

It's going to get increasingly sophisticated, and they're going to go after every surface of your system and all of your employees.

任何你早就忘记的老项目都会被找到并用来对付你。

Any old projects you've long forgotten about will be found and used against you.

我们之所以能幸存，唯一的原因是我们有 agents 在 24/7 运行。

The only reason we're surviving is because we have agents going 24/7.

我们仍然几乎没睡觉。

We're still barely sleeping.

祝好运。

Good luck.

很抱歉你们要处理这个，但这确实是一个我们都在共同面对的集体问题。

Sorry you're dealing with this, but really it's a collective problem we're all facing together.

现在，如果这是新常态，那么这种常态可以走向非常不同的路径。

Now, if this is the new normal, there are very different paths that that normal can take.

在这个谱系的一端，是前 OpenAI 员工 Joshua Achiam 的评论，他写道，感觉就像网络界的 2020 年 3 月 1 日。

On the one end of the spectrum is what was suggested by former OpenAI staffer Joshua Achiam, who wrote, feels like March 1st, 2020 for cyber.

不正常。

Not normal.

有事情在发生。

Something is happening.

几个月内互联网会封锁吗？

Internet lockdowns in a couple of months?

另一方面，有些人认识到我们可能不得不用 AI 来对抗 AI。

On the flip side, there are those who are recognizing that we're probably going to have to fight AI with AI.

嗯，我们刚刚在大量项目中快速轮换了每一个密钥，而让我惊讶的是，这在不久以前还是一场绝对的噩梦。

Well, we just rotated every single key across a large number of projects very quickly, and I'm struck by the fact that this would have been an absolute nightmare not too long ago.

AI 在网络安全的防御方面真的被低估了。

The defensive aspect of AI for cybersecurity is really underrated.

核武器类比在 AI 这里不成立的地方在于，你不能用核武器来阻止核武器，但你可以用 AI 来阻止 AI 攻击。

Where the nuclear weapon analogy breaks down with AI is that you can't stop a nuclear weapon with another nuclear weapon, but you can stop an AI attack with an AI.

Box 的 Aaron Levie 在这些主题上进一步阐述，写道：网络安全将成为 AI 最深刻的方面之一。

Box's Aaron Levie built on those themes, writing: Cyber is going to be one of the most profound aspects of AI.

我们现在有了一支不知疲倦的队伍，可以追捕、发现、修补或攻击任何已创建过的系统和软件。

We now have a tireless workforce that can hunt down, discover, patch, or attack any system and software ever created.

我们将使用 agents 来识别现有系统和基础设施中长期存在的风险。

We will use agents to identify the longstanding risks in existing systems and infrastructure.

攻击者将使用 agents 来加速发现环境中的漏洞。

Attackers will use agents to accelerate the discovery of gaps in environments.

我们同样会使用 agents 来防御攻击并发现异常模式，从而更好地保护我们的数据及更多。

We will equally use agents to defend against attacks and discover anomalous patterns to better protect our data and much more.

我们正在进入一个新的网络体制，我们可能会在这个循环中使用的 tokens 比现在想象的多 100 倍。

We're entering a new cyber regime, and we'll probably use 100x more tokens on this loop than we're imagining right now.

因为我们能够扫描每一份日志，查看每一行代码，检查流量，并以之前无法理解的规模处理数据。

Because we can scan every log, look at every line of code, look through traffic, and process data at a scale that wasn't comprehensible before.

企业将比以往任何时候都更关心他们如何管理自己的网络、系统、软件、数据、身份、设备等等。

More than ever, enterprises are going to care deeply about how they manage their networks, systems, software, data, identity, devices, and more.

Agents 在很大程度上将成为这些挑战的解决方案，但它们也会让所有人都在这个过程中持续忙碌。

Agents will largely become the solution to these challenges, but they will keep everyone up in the process.

在另一篇帖子中，Aaron 写道，如果你想知道 AI 会创造哪些工作，只需看看网络安全领域即可。

In another post, Aaron wrote, if you want to know all the jobs that AI will produce, look no further than cybersecurity.

这将成为企业未来最大的投资领域之一。

This is going to become one of the biggest investment areas for enterprises going forward.

而且即使这项工作变得更加 agentic 和自主，你仍需要更多的人才来指导 agents 处理最关键的工作、审查发现、修补系统、回应事件等等。

And even as that work becomes more agentic and autonomous, you will need more talent to point the agents at the most critical work, review findings, patch systems, respond to incidents, and more.

现在有很多机会，对于那些保护数据和企业的系统，以及那些部署这些系统并保护组织的专业人士来说。

Lots of opportunity right now for the systems that protect data and enterprises, as well as the professionals that are deploying them and protecting organizations.

外面的情况只会变得更加狂野。

It's only going to get more wild out there.

Aembit联合创始人Zach Korman用更生动的语言论证说，唯一的出路就是直接面对。

Aembit co-founder Zach Korman argues in more colorful language that the only way out is through.

他发帖说，应对网络安全威胁只有一个答案。

He posted, there is only one answer to cybersecurity threats.

搞定你那些烂摊子。

Fix your shit.

害怕威胁行为者使用AI？

Scared of threat actors using AI?

担心恶意智能体？

Worried about rogue agents?

觉得开源模型很可怕？

Think open-source models are spooky?

搞定你那些烂摊子。

Fix your shit.

那些主张禁止AI模型、监管GPU获取的人群，不如先搞定自己的烂摊子。

The ban AI models and regulate GPU access crowd should instead fix their shit.

然而回到Aaron Levie刚才提到的人才缺口，其他人认为这种“搞定”并不容易，也不是所有人都能做到。

And yet going back to the talent gap that Aaron Levie was just talking about, others think that that sort of fixing is not going to come easy and it's not going to be available for everyone.

Will Manidis写道，如果从今天的节奏来看，市场远未定价那些银行、医疗等行业为了获得足够规模以防御AI驱动的安全漏洞而必须进行的合并速度。

Will Manidis writes, if today is any indication of the pace, markets are not nearly pricing in the rate at which banks/healthcare, etc., are going to have to merge to acquire enough scale to defend against AI-driven security vulnerabilities.

总结一下，Enclave的Tal Hoffman写道：真是特别的一天。

Summing it up, Enclave's Tal Hoffman writes, what a day.

网络安全的未来在于蜂群。

The future of cybersecurity is swarms.

攻击的智能体蜂群和防御的智能体蜂群。

Swarms of agents attacking and swarms of agents defending.

或者更确切地说，是舰队对抗蜂群。

Or rather, fleets versus swarms.

受管控的防御智能体对抗廉价且无情的进攻智能体。

Governed agents on defense versus cheap and relentless agents on offense.

谁协调得更快，谁就获胜。

Whoever coordinates faster wins.

在一篇题为《迈向保护互联网安全》的文章中，OpenAI总裁Greg Brockman写道，用他自己的话说，需要新的方法。

In a post called Towards Securing the Internet, OpenAI President Greg Brockman wrote about how, in his own words, new approaches will be needed.

他说：我们正在积极思考这些问题，并寻求社区的反馈，以帮助我们共同应对随着模型改进而提升互联网安全的挑战。

He said, We are actively thinking about those and looking for feedback from the community to help us collectively rise to the challenge of improving the security of the internet as models improve.

随着漏洞发现的加速，我们需要新的防御解决方案，可能包括有授权的防御者，比如政府扫描互联网寻找易受攻击的主机，并通知或者，在极端情况下，远程修补这些系统。

As vulnerability discovery ramps, we will need new defensive solutions, potentially including authorized defenders such as government scanning the internet for vulnerable hosts and either notifying or, in extreme cases, patching those systems remotely.

在进一步讨论OpenAI的一些承诺后，他总结道：我相信我们正在进入网络安全的新阶段，在这个阶段，模型能够发现具有互联网规模影响的漏洞。

After discussing some more of OpenAI's commitments, he concludes, I believe we're entering a new phase of cybersecurity where the models are able to find vulnerabilities with internet-scale impact.

我们相信各地的防御者都可以发挥作用，将模型应用于自己的防御，发现并修复共享基础设施中的问题，并分享最佳实践，最终使互联网更加安全。

We believe that defenders everywhere have a part to play, applying models to their own defenses, finding and fixing issues in shared infrastructure, and sharing best practices that can ultimately make the internet more secure.

而最乐观的看法是，最终软件将变得更加安全。

And the most optimistic take is that ultimately software will be more secure.

A16z的Martin Casado写道：从长远来看，AI将使软件更加强大，也更加安全可靠。

A16z's Martin Casado wrote, in the long run, AI is going to make software so much more capable and so much more secure and reliable.

但在此之前，情况会变得非常非常糟糕。

But before that, things are going to get much, much worse.

长期听众以前应该听过我说，在AI的许多方面，我是一个令人难以置信的长期乐观主义者。

Longtime listeners will have heard me say before that across so many aspects of AI, I am an incredible long-term optimist.

然而，长期乐观主义并不否认短期甚至中期转型中潜在的混乱、痛苦和折磨。

And yet long-term optimism does not deny the potential chaos, pain, and agony of short or even medium-term transitions.

我相信这对就业来说是这样，对网络安全来说当然更是如此。

I believe that's the case for jobs, and it is certainly the case for cybersecurity.

而且天哪，我们现在就身在其中。

And boy, are we in it now.

我当然会随时告诉大家后续的发展。

I will of course keep you informed as things evolve.

不过呢，今天就到这里，以上就是今天《AI每日简报》的全部内容。

For now, however, that is going to do it for today's AI Daily Brief.

一如既往感谢大家的收听或收看，我们下期再见，Peace！

Thanks as always for listening or watching, and until next time, peace!

Peace！

Peace!

已剔除 2 处广告（点击展开查看）

M10:41广告 · 已剔除

First of all, thank you to today's sponsors KPMG, Section, CData, and Blitzy.

To get an ad-free version of the show, go to patreon.com/AIDailyBrief, or you can subscribe on Apple Podcasts.

And if you want to learn more about sponsoring the show, send us a note at [email protected].

M19:45广告 · 已剔除

A new study from KPMG and the University of Texas at Austin found that when people work with AI, similar skills don't guarantee similar outcomes.

Researchers studied more than 500 early-career professionals and found that the best performers consistently amplified the value of AI by guiding, evaluating, and refining its outputs.

These top performers, called AI amplifiers, weren't defined by what they knew alone, but by how they worked with AI.

Learn more about what separates AI Amplifiers from everyone else at kpmg.com/us/aiamplifiers.

Here's a harsh truth.

Your company is probably spending thousands or millions of dollars on AI tools that are being massively underutilized.

Half of companies have AI tools, but only 12% use them for business value.

Most employees are still using AI to summarize meeting notes.

If you're the one responsible for AI adoption at your company, you need Section.

Section is a platform that helps you manage AI transformation across your entire organization.

It coaches employees on real use cases, tracks who's using AI for business impact, and shows you exactly where AI is and isn't creating value.

The result?

You go from rolling out tools to driving measurable AI value.

Your employees move from meeting summaries to solving actual business problems.

And you can prove the ROI.

Stop guessing if your AI investment is working.

Check out Section at sectionai.com.

That's S-E-C-T-I-O-N-A-I.com.

This episode is brought to you by CData.

Companies rolling out AI keep hitting the same wall.

Token spend is climbing, security is holding agents back, and no one knows how AI is truly being used.

The root cause: AI is cut off from the systems and context your business runs on.

That's why CData built Connect AI Gateway— one control point between your AI and your systems.

Built on the connectivity layer powering Palantir, Google, Salesforce, and hundreds more, each agent gets exactly the data and tools it needs.

It governs down to the record and lets you finally see your org's complete AI usage in one place.

Accurate answers, a fraction of the token cost, and a gateway that learns your business with every interaction.

See how at cdata.ai.

Blitzy's deep codebase understanding unlocks the thing every roadmap owner cares about: shipping new features.

Here's the truth about building inside a massive enterprise codebase.

Writing code was never the bottleneck.

Context is.

Which system does this touch?

Which contracts can't break?

Which standards apply?

Blitzy already knows because it reverse-engineered your entire codebase into a dynamic knowledge graph before feature work began.

With that complete picture, Blitzy builds features end-to-end.

Architecture, APIs, UI, and tests all validated against your existing systems.

One Blitzy customer built an AI-native application from scratch with 100% autonomous completion, saving over 2,700 engineering hours.

Features that respect your codebase instead of fighting it.

Stop letting your backlog grow faster than your team.

Accelerate your roadmap at blitzy.com.

That's B-L-I-T-Z-Y dot com.