Kwa zaka zingapo zapitazi, chitetezo cha mapulogalamu chinali ndi malire omveka bwino: malo osungiramo zinthu ndi pipelineApa ndi pomwe zowongolera zinali, komwe kusanthula kunachitikira, komwe magulu ankasankha ngati china chake chatumizidwa ku kupanga. Zonsezi zinkadalira lingaliro limodzi: wopanga mapulogalamu anasankha momveka bwino kuti ndi khodi iti ndi zikhalidwe ziti zomwe zalowa mu dongosololi.
Lingaliro limenelo silikugwiranso ntchito. Chiwerengero chowonjezeka cha ma code masiku ano chimalembedwa, kuperekedwa, kapena kuyikidwa ndi wothandizira wa AI, nthawi zambiri popanda aliyense kuyang'ana dzina la zomwe zikulowetsedwa. Pamene decisKuchuluka kwa zomwe zimalowa mu code kumasuntha, komanso kuukirako kumasuntha. Kumapita patsogolo kwambiri pa ndondomekoyi: nthawi yomwe codeyo imapangidwa, mkati mwa wothandizira komanso m'mafayilo omwe amaikonza.
Uwu ndi malo anu owukira a AI: mtundu uliwonse, wothandizira, seva ya MCP, luso, ndi kudalira komwe kumalangizidwa ndi AI komwe tsopano kungabweretse chiopsezo munthu asanachiwunikenso. AI yomweyi yomwe opanga mapulogalamu anu amaikhulupirira tsopano ndi gawo lake. Iyi si ngozi yamtsogolo. Ndi kusintha komwe kwachitika kale, ndipo nayi momwe zimaonekera pochita.
Kuukira kwamphamvu, osati chochitika chokhachokha
Palibe chilichonse mwa izi chomwe ndi chochita kafukufuku wa labuciskapena zongopeka. Izi ndi zochitika zapagulu, zolembedwa, pafupifupi zonse za chaka chatha, ndipo chilichonse chimayandikira pang'ono kwa wothandizira wa AI mwiniwake:
- Ogasiti 2025, s1ngularity: Owukira adaba chizindikiro chofalitsa kuchokera ku Nx, imodzi mwa makina omanga omwe amagwiritsidwa ntchito kwambiri, ndipo adakankhira mitundu yoyipa ku npm, pogwiritsa ntchito zida za AI kusaka zinsinsi pamakina opanga mapulogalamu.
- Seputembala 2025, choko/debug: Chimodzi mwa zinthu zazikulu kwambiri zomwe zimachitika pa npm ndi ma reach, ma phukusi 18 okhala ndi zotsitsa zoposa mabiliyoni awiri pa sabata, zomwe zidatengedwa kudzera mu akaunti ya munthu mmodzi.
- Seputembala 2025, Shai-Hulud: imodzi mwa nyongolotsi zoyamba zolembedwa zomwe zinatha kudzifalitsa zokha kudzera pa npm. Mafunde ake achiwiri, mu Novembala, anali amphamvu kwambiri ndipo anali ogwirizana ndi zinsinsi zomwe zinawululidwa m'malo osungiramo zinthu oposa 25,000.
- Okutobala 2025, zinthu zosagwiritsidwa ntchito zomwe zatumizidwa kunja: gawo la kampeni ya PhantomRaven, komwe AI inayambitsa ma malware enieni mu npm kudzera mu njira yochepetsera.
- Chaka chino, ClawHub: kaundula wa luso la AI lomwe lili ndi poizoni pomwe maluso asanu mwa asanu ndi awiri omwe adatsitsidwa kwambiri anali a pulogalamu yaumbanda.
Makampaniwa akukhazikitsa mfundo zomwezi. OWASP Top 10 ya Mapulogalamu a LLM imayika jakisoni mwachangu pa nambala wani. OWASP MCP Top 10 (yomwe pakadali pano ili mu beta) ikufuna kugwiritsa ntchito othandizira ma protocol polankhula ndi zida. OWASP Agentic Skills Top 10, pulojekiti yatsopano ya Incubator-stage, imatchula maluso oyipa ngati chiopsezo chachikulu. OWASP nthawi zambiri imayenda mosamala; kutsegula mbali zitatu nthawi imodzi, imodzi mwachangu, ikunena zinazake za momwe izi zikuyendera mwachangu.
Zonse zitatuzi zimagwirizana pa lingaliro limodzi: malangizo, zida, ndi ma configurations ozungulira chitsanzo tsopano ndi gawo la malo owukira a AI, ndipo nthawi zambiri amakhala mkati mwa malo anu osungira. Izi zimabweretsa funso loyamba lofunika kufunsa magulu anu: ndani amawunikanso mafayilo a malamulo, luso, ndi ma configurations a MCP omwe amakhala mu repo yanu?
Vekitala 1: luso loipa
Luso ndi fayilo ya malangizo ndi luso lomwe limaphunzitsa wothandizira waluso momwe angachitire ntchito. Si njira yokhayo yowongolera khalidwe la wothandizira (malamulo amafayilo, hooks, ndipo ma MCP config amachita chimodzimodzi), koma onse amagawana chinthu chimodzi: amayenda mkati mwa malo osungiramo zinthu, ndi code.
Kafukufuku chaka chino adawunikanso maluso 4,000 mwa awa:
- 36% anali ndi vuto limodzi la chitetezo.
- 13.4% anali ofunikira kwambiri.
- Pafupifupi anthu 100 anali ndi ndalama zambiri zolipirira.
Kusintha kwakukulu: wowukira sakulunjikanso ku code yanu. Akuyang'ana wothandizira amene amalemba code yanu, akuika malangizo obisika (nthawi zina pogwiritsa ntchito zilembo zosaoneka) zomwe chitsanzocho chimawerenga ndikuwona ngati zogwira ntchito. Munthu wowunikira amavomereza pull request ndi chikhulupiriro chabwino chifukwa, kwa iwo, fayiloyo ikuwoneka yoyera. Chitsanzocho chimatanthauzira malangizo omwe wowunikirayo sanawonepo.
Izi sizongopeka. CVE-2025-59536 (CVSS 8.7) inalola kuyambitsa Claude Code kuchokera ku malo osadalirika, komwe kasinthidwe koyipa kangathe kuyendetsa malamulo wogwiritsa ntchito asanavomereze kukambirana za trust. Vuto lina, CVE-2026-21852, linalola kutulutsa kiyi ya API kudzera mu kasinthidwe kolamulidwa ndi pulojekiti, popanda wogwiritsa ntchito kuvomereza chilichonse.
H2: Vekitala 2: kugwedezeka
Dzinali limaphatikiza "slop" (zinyalala zomwe AI nthawi zina imapanga) ndi kuukira kwa typosquatting komwe kumachitika nthawi zina. Kulemba typosquatting kumadalira zolakwa za anthu: wowukira amalembetsa dzina la phukusi lomwe lili pafupi ndi lodziwika bwino ndipo amayembekezera typo. Ndi mwachisawawa.
Kugona pansi sichiyembekezera cholakwika. Mu kafukufuku amene watchulidwa pa gawoli, 19.7% ya ma phukusi olembedwa ndi ma AI models adaloza ku ma phukusi omwe kulibe. Ma model amakonda kuonera mayina omwewo mobwerezabwereza, kotero wowukira amawona omwe amatchula AI akupanga, amalembetsa mayinawo ndi ma code oyipa, ndikudikirira kuyika kwina komwe kumalangizidwa ndi AI kuti alowe mu pulogalamu yanu.
Sikochepa kukula kwake: Ma phukusi atsopano opitilira 450,000 oipa adapezeka mu 2025. Zitsanzo ziwiri zimapangitsa kuti izi zikhale zenizeni:
- Wofufuza anaika phukusi loyesera lopanda vuto lotchedwa kukumbatirana nkhope-cli kuti atsimikizire mfundoyo. Inalembedwa zotsitsa zoposa 30,000 m'miyezi itatu.
- zosagwiritsidwa ntchito, kuchokera mu nthawi yomwe ili pamwambapa, yatsimikiziridwa kuti ndi pulogalamu yaumbanda, ikupezeka mu kaundula wa anthu onse, pogwiritsa ntchito njira imeneyi. Imeneyo sinali mayeso.
Funso silili ngati izi zingachitikire gulu lanu. Koma ndi kuchuluka kwa ma phukusi omwe akulimbikitsidwa ndi AI omwe akulowetsa code yanu lero popanda wina kuwayang'ana.
Yankho: standards akupeza zomwe akufuna
Mphamvu ziwiri zimayendera limodzi. Pamene ziwopsezo zikuchulukirachulukira, standardmatupi a anthu akuchitapo kanthu:
- NIST SP 800-218A imakulitsa njira yotetezeka yopangira mapulogalamu ndi machitidwe apadera a mitundu ya AI, kuphatikiza umboni wa umphumphu ndi chiyambi.
- In May 2026, CISA ndi ogwirizana nawo apadziko lonse lapansi a G7 inafalitsa malangizo okhudza Software Bill of Materials for AI, kufotokoza zomwe zili muzinthu zomwe zili mu mndandandawo: mitundu, ma datasets, zigawo, opereka, ndi zodalira.
Malangizo ake ndi omveka bwino: SBOM ikukula kukhala AI-BOM. Simungathe kutsimikizira kapena kutsimikizira zomwe simungathe kuzisunga. Ndipo masiku ano, mabungwe ambiri sangathe:
- 43% sangathe kuwunika kapena kusunga zida za AI zomwe akugwiritsa ntchito kale.
- 79% Satha kuwona momwe ma AI agents ndi ma MCP systems akugwirira ntchito m'malo awoawo.
Mu malo olamulidwa, katundu uyu akusintha kuchoka pa machitidwe abwino kupita ku zomwe akuyembekezera kapena zomwe akuyenera kutsatira. Koma katunduyo amangokuuzani zomwe muli nazo. Payekha, saletsa kuukira.
Kusiyana: EDR ya AppSec
SAST ndi SCA Zipangizo zapangidwa kuti zifufuze ma code ndi kudalira, osati khalidwe la wothandizira kapena kasinthidwe kake. BDU imawona njira ndi maulumikizidwe a netiweki, koma nthawi zambiri imakhalabe ndi mawonekedwe a chitetezo cha pulogalamu kuti imvetse kudalira kapena kasinthidwe ka wothandizira. Pakati pa magulu awiriwa a zida pali kusiyana, komwe code ikupangidwa tsopano, ndi komwe malo owukira a AI amakhala.
Mpata umenewo uli ndi malo atatu osawoneka:
- Katundu wa AI. Ma Model, othandizira, ndi ma seva a MCP samawonekera pa intaneti yanu SASTkapena SCAradar ya 's. Simungathe kusunga zinthu zomwe simukuziona.
- Mafayilo okonzera. Maluso, malamulo, ndi ma MCP configs zimawongolera khalidwe la wogwiritsa ntchito koma nthawi zambiri zimawunikidwa ngati kuti ndi mawu wamba osavulaza.
- Kuyika phukusi. A Kudalira molakwika kumatha kuyamba kudziwika kuti ndi koipa, kenako n’kutulutsa zinsinsi ndi zizindikiro popanda wina aliyense kuzivomereza.
Momwe Xygeni imatsekera
Zimene EDR imachita pa ma endpoints, Xygeni Shield imagwira ntchito pa moyo wa chitukuko chothandizidwa ndi AI: imateteza komwe ma code amapangidwa pamene ikumvetsetsa momwe pulogalamu ndi chitetezo zimagwirira ntchito.
- Kuwonekera komwe SAST ndi SCA osafika. Xygeni imawonetsa luso loipa ndi malamulo a mafayilo, imasanthula ma config a MCP, ndikupanga njira yokonzekera kuwunika. AI-BOM, yolumikizidwa ndi OWASP LLM, MCP, ndi Agentic Skills Top 10s.
- Luntha, osati zizindikiro zokha. MEW (Malware Early Warning) imasanthula khalidwe ndi chiopsezo cha phukusi kuti liletse CVE, upangiri, kapena siginecha ya anthu onse isanayambe. Luntha la pa intaneti laposachedwa limadula kulumikizana ndi zomangamanga zodziwika bwino zoyipa.
- Malo amodzi owongolera, kuyambira pa code mpaka kumapeto. Wothandizira mmodzi, wotumizidwa popanda kukonzanso chilengedwe, wokhala ndi ulamuliro wa deta ya ku Ulaya komanso umboni wotsatira malamulo.
Mu chiwonetsero cha pompopompo, kutsata mfundo kumeneku kunaletsa kuyesa kwa wothandizira wa AI kukhazikitsa phukusi loipa m'njira zitatu zosiyana zokhazikitsira (malo owonera, woyang'anira phukusi, ndi kutsitsa mwachindunji) kukhazikitsa kusanachitike, zonse zidalowa nthawi yeniyeni ndikutumizidwa ku SOC. Kuyambitsa pulojekiti yoyamba nthawi zambiri kumatenga pafupifupi ola limodzi; kufalitsa nkhani m'bungwe lonse nthawi zambiri kumatenga sabata imodzi kapena ziwiri, kutengera kapangidwe kake.
FAQ
Kodi malo owukira a AI ndi otani mu ndime imodzi?
Malo owukira a AI ndi gulu la mitundu, othandizira, ma seva a MCP, luso, mafayilo a malamulo, ndi zodalira zomwe AI imalimbikitsa zomwe chiopsezo chingalowe mu pulogalamu, nthawi zambiri munthu asanayiwunikenso. Zimapitirira kupitirira malamulo achikhalidwe ndi zodalira kuti ziphatikize mafayilo osinthira ndi malangizo omwe amawongolera momwe wothandizira AI amachitira zinthu.
Ndingadziwe bwanji ngati dzina la phukusi lomwe laperekedwa ndi wothandizira wanga wa AI ndi losayembekezereka kapena lovomerezeka koma losazolowereka?
Tsimikizirani musanayike: yang'anani kaundula ndikuwunika zomwe zili mu phukusili komanso cholinga chake m'malo modalira dzina lokha. Xygeni imadzipangira yokha kutsimikizira kumeneku nthawi yeniyeni panthawi yopanga ma code, kotero kukhazikitsa kumavomerezedwa kapena kuletsedwa kusanayambe, kaya phukusili ndi lomwe mumadziwa kapena ayi.
Kodi kukwera phiri kumakhudza mitundu yonse ya AI mofanana?
Kafukufuku wa 19.7% adakhudza mitundu yosiyanasiyana ndipo adapeza kuti vutoli likufalikira kwambiri, ndipo pali kusiyana kochepa pakati pawo. Iyi ndi njira yolumikizirana pakati pa chitukuko chothandizidwa ndi AI, osati cholakwika cha wothandizira m'modzi.
Kodi tingayang'ane mobwerezabwereza ngati tayika kale phukusi lokhala ndi ziwonetsero kapena loipa?
Inde. Pulatifomu ya Xygeni imapatsa makasitomala mwayi wopeza database yosungidwa ya ma phukusi oyipa omwe apezeka, omwe angafufuzidwe pogwiritsa ntchito zinthu zomwe zilipo kale, kotero mutha kutsimikizira mwachangu ngati chilichonse chomwe chayikidwa kale ndi chiopsezo chodziwika.
Kodi kukhazikitsa kumatenga nthawi yayitali bwanji kuti bungwe lapakati likhale ndi magulu angapo?
Kuyambitsa pulojekiti yoyamba nthawi zambiri kumatenga ola limodzi. Kukulitsa bungwe lonse nthawi zambiri kumatenga sabata imodzi kapena ziwiri, kutengera kapangidwe ka gulu ndi momwe likugwirira ntchito.
Mapu a malo anu owukira a AI, kwaulere
Ikani mapu a AI ya pulogalamu yanu kwaulere: pangani akaunti ndi yambitsani koyamba mumphindi zochepaYambani ndi pulogalamu imodzi, onani zomwe zili mkati mwake, ndikuwona gawo la malo anu owukira a AI lomwe ndi loopsa.
*Maluso ena omwe atchulidwa pamwambapa amalimbikitsidwa kudzera mu Xygeni Shield ndi ASPM/Ma module achitetezo a AI; kupezeka kumatha kusiyana malinga ndi dongosolo. Onani xygeni.io kuti mudziwe zambiri za malonda omwe alipo panopa.
