布鲁斯·施奈尔: “长期以来，我们想当然地认为，漏洞公开之后我们还有时间给系统打补丁……情况已不再如此。……这些发展可能会让天平彻底倾斜。我们可能正面临一场属于网络攻击者的奇点事件”

由 AI 翻译，经编辑部审校

原文

“In this future, attack capabilities could accelerate beyond our individual and collective capability to handle. We have long taken it for granted that we have time to patch systems after vulnerabilities become known, or that withholding vulnerability details prevents attackers from exploiting them. This is no longer the case. The cyberattack/cyberdefense balance has long skewed towards the attackers; these developments threaten to tip the scales completely. We’re potentially looking at a singularity event for cyber attackers. Key parts of the attack chain are becoming automated and integrated: persistence, obfuscation, command-and-control, and endpoint evasion. Vulnerability research could potentially be carried out during operations instead of months in advance.”

— 布鲁斯·施奈尔, Schneier on Security, 10.10.2025 ↗

译文

“在这样的未来，攻击能力的增长可能超出我们每个人乃至所有人共同的应对能力。长期以来，我们想当然地认为，漏洞公开之后我们还有时间给系统打补丁，或者认为不公开漏洞细节就能阻止攻击者利用它们。情况已不再如此。 网络攻防之间的平衡长期偏向攻击者；这些发展可能会让天平彻底倾斜。我们可能正面临一场属于网络攻击者的奇点事件。攻击链的关键环节正在被自动化并整合在一起：持久化、混淆、命令与控制，以及终端规避。漏洞研究可能会在行动过程中进行，而不必提前数月完成。”