Wiz 演示 Gemini 4 从配置文件提取主密钥提权
视频里 Wiz 展示 Gemini 4 从医疗软件配置文件中找出主密钥并转为管理员权限，帖文借此讨论 AI 攻防两面性。
ANTHROPIC'S DEPUTY CISO SAYS HOLD ON FOR ~18 MONTHS. THIS IS WHAT THE LAST WEEK LOOKED LIKE > Oct 17: private keys for 8 eMudhra intermediate certificates turned out to be recoverable. Chrome and Firefox blocked them that night > Oct 20: Anthropic's red team had Claude audit 25 open-source projects. 493 security issues > Oct 21: PHP shipped emergency fixes for PHP2Shell, flaws AI helped find > Oct 13-22: JPMorgan, Schwab and Morgan Stanley start blocking outside AI agents his ask to security leaders: go to your boards now, and not for AI. for the basics in the video Wiz shows Gemini 4 pulling a master key out of a config file in health software and turning it into admin access. defenders use these models. attackers can use the same ones
这条是引用着另一条写的：x.com/jasondclinton/status/2113325263157395456