Anthropic上市的意義何在？幾乎關乎一切。 (2/2)

 What’s Riding on Anthropic’s Market Debut? Nearly Everything. (2/2)

Anthropic sits atop a pyramid of business partners and suppliers, making it a barometer of the broader economy. Its initial public offering will have widespread implications.

By Erin Griffith and Lauren Hirsch - Erin Griffith reported from San Francisco and Lauren Hirsch from New York.

Oct. 26, 2026, 5:02 a.m. ET

(continue)

This month, Anthropic gathered investors at its San Francisco headquarters to present its financial performance and growth plans. By most measures, its numbers were astounding. The company’s revenue hit $16.8 billion in the third quarter, up 45 percent from the prior quarter. But investors compared that with even faster growth of 141 percent in the second quarter.

How Anthropic explains that slowdown will be important. If it was because the company lost market share to OpenAI or companies using cheaper open-source A.I. models — the technology that powers chatbots and other tools that generate videos, text and computer code — that means the overall demand for A.I. services remains healthy. If Anthropic’s growth slowed because the entire market saw less demand for A.I. products, the reaction could be more dramatic.

Anthropic declined to comment.

For the past year, Anthropic has been Silicon Valley’s hottest company, thanks partly to Claude Code, the service that transformed how software engineers write code. The company’s revenue soared, causing private market investors to drive up its valuation to $965 billion, topping OpenAI.

To meet the demand for its A.I. products, Anthropic struck deals worth hundreds of billions to lease computing power from Google, Amazon and Microsoft. It has also spent on chips from Nvidia and data centers from Nscale and others. The companies serving Anthropic are, in turn, shelling out money to their suppliers.

But over the summer, some Anthropic customers concluded they were spending too much on “tokens,” or units of data processed and generated by A.I. systems. They sought cheaper options. Meta, one of Anthropic’s largest customers, projected this year that it would spend as much as $10 billion a year on the company’s technology, but pulled back as it switched to other A.I. models.

Stocks of some A.I. companies that went public this year have wilted. Shares of Cerebras, a Silicon Valley maker of A.I. chips, have fallen roughly 40 percent from their offering price in May. Shares of Accelevation, an A.I. infrastructure company, are trading about a third lower than their $18 offering price in September. Elon Musk’s SpaceX, which went public in June, has also fallen far from its peak, though it remains roughly 9 percent above its offering price.

Against this backdrop, the market for initial public offerings has slowed. Holtec, which provides nuclear energy to the A.I. sector, withdrew its listing last month. SB Energy, a data center company controlled by SoftBank, one of OpenAI’s biggest backers, and Aggreko, a power company that works with data centers, have delayed their plans to go public.

A.I. infrastructure is a “dominant theme” of the I.P.O. market this year, said Matthew Kennedy, a senior strategist at Renaissance Capital, which tracks public listings. “It’s also been among the hardest hit by the sell-off these past few weeks.”

Bankers have warned companies that they may not get the valuations they were contemplating just two months ago. In an earnings call this month, David Solomon, the chief executive of Goldman Sachs, said that while the market for public offerings was “wide open,” companies seeking valuations close to those discussed this summer might choose to wait.

“Things got a little bit softer in September,” he said.

Anthropic’s revenue numbers have added to the doubts. The company had been expected to go public at a valuation as high as $2 trillion. But after seeing the slowing growth and the market doldrums, some investors have started discussing a valuation of $1.5 trillion to $1.7 trillion, according to one person with knowledge of the matter.

A.I. executives have been trying to provide reassurance. Taiwan Semiconductor Manufacturing Company, which supplies chips to the A.I. sector, saw “no ceiling” to its profits, its chief executive, C.C. Wei, said this month.

Late last week, amid growing concerns about A.I. spending, the markets fell further. The tech-heavy Nasdaq experienced its largest drop since June.

Translation

Anthropic上市的意義何在？幾乎關乎一切。 (2/2)

Anthropic 位於由商業夥伴和供應商組成的金字塔頂端，使其成為整體經濟的晴雨表。其首次公開發行 (IPO)將產生廣泛的影響

（繼續）

本月，Anthropic 在舊金山總部召集投資者，展示了其財務表現和成長計劃。從大多數指標來看，其業績令人矚目。該公司第三季營收達168億美元，較上一季成長45%。但投資者將其與第二季141%[與第一季比]的更快成長率進行了比較。

Anthropic 如何解釋成長放緩至關重要。如果是因為該公司市場份額被 OpenAI 或其他使用更便宜的開源AI模型（即驅動聊天機器人和其他生成短片、文字和電腦程式碼的工具的技術）的公司蠶食，那就意味著市場對AI服務的整體需求仍然旺盛。但如果 Anthropic 的成長放緩是因為整個市場對AI產品的需求下降，那麼市場反應可能會更加劇烈。

Anthropic 拒絕置評。

過去一年，Anthropic 一直是矽谷最炙手可熱的公司，這在一定程度上要歸功於 Claude Code，這項服務徹底改變了軟件工程師編寫程式碼的方式。該公司營收飆升，促使私募市場投資者將其估值推高至9,650億美元，超過了OpenAI。

為了滿足對其人工智能產品的需求，Anthropic 與 Google、亞馬遜和微軟達成了價值數千億美元的協議，租賃運算能力。它還斥巨資購買了英偉達的晶片以及 Nscale 等公司的數據庫。而為Anthropic 提供服務的公司，亦要沒有選擇地增加向自己供應商所付出開支。

但今年夏天，一些 Anthropic 的客戶意識到他們在「代幣」(tokens)（即人工智能系統處理和產生的數據單位）上的支出過高，於是開始尋求更經濟的選擇。 Anthropic 最大的客戶之一 Meta今年曾預計每年將在該公司的技術上花費高達100億美元，但隨著轉向其他人工智能模型，該公司減少了這筆支出。

今年一些上市的人工智能公司的股價大幅下跌。矽谷人工智能晶片製造商Cerebras的股價較5月的發行價下跌了約40%。人工智能基礎設施公司 Accelevation 的股價較9月18美元的發行價下跌了約三分之一。馬斯克的 SpaceX 公司於6月上市，股價也遠低於峰值，但仍比發行價高出約9%。

在此背景下，首次公開募股（IPO）市場放緩。為人工智能提供核能的Holtec公司也未能倖免。上個月，一些公司撤回了上市計劃。數據中心公司 SB Energy（由 OpenAI 最大的支持者之一軟銀控股）和為數據中心提供電力服務的公司 Aggreko 都推遲了上市計劃。

追蹤上市的公司 Renaissance Capital 高級策略師 Matthew Kennedy 表示，人工智能基礎設施是今年IPO市場的「主導主題」。 “它也是最受過去幾週拋售衝擊的行業之一。”

銀行家警告各公司，它們可能無法獲得兩個月前預期的估值。高盛首席執行官 David Solomon 在本月的財報電話會議上表示，儘管 IPO 市場 “開放” ，但那些尋求接近今年夏天討論的估值的公司可能會選擇等待一會。

他說:「9月市場行情有所回落」。

Anthropic 的營收數據也加劇了人們的疑慮。先前市場預期該公司上市時的估值高達2兆美元。但據一位知情人士透露，鑑於增長放緩和市場低迷，一些投資者已開始討論估值在1.5兆至1.7兆美元。

人工智能領域的高階主管一直在努力安撫市場情緒。為人工智能產業供應晶片的台積電執行長C.C. Wei 本月表示，該公司利潤「沒有上限」。

上週的較後時候，由於對人工智能支出的擔憂日益加劇，市場進一步下跌。以科技股為主的Nasdaq指數經歷了自6月以來最大的單日跌幅。

So.  Anthropic’s going public will be a litmus test for the economy, with trillions of dollars at stake. Anthropic is a key player in the A.I. industry. It is valued in the private markets at nearly $1 trillion and will become one of the world’s biggest public companies. Anthropic and OpenAI are sitting at the top in the world of AI business and believe that demands for A.I. products will keep growing. Apparently, the stakes are getting higher and higher.

Note:

1. "Shell out" is an English idiom that means to pay or spend a large amount of money, often reluctantly or unexpectedly. In a financial context, it means you are forced to open your wallet or bank account to hand over cash. In tone, it usually carries a slightly negative or begrudging connotation. People typically use "shell out" when they feel something is expensive or when they have no choice but to pay. (Google)

Anthropic上市的意義何在？幾乎關乎一切（1/2）

Recently The New York Times reported the following:

What’s Riding on Anthropic’s Market Debut? Nearly Everything. (1/2)

Anthropic sits atop a pyramid of business partners and suppliers, making it a barometer of the broader economy. Its initial public offering will have widespread implications.

By Erin Griffith and Lauren Hirsch - Erin Griffith reported from San Francisco and Lauren Hirsch from New York.

Oct. 26, 2026, 5:02 a.m. ET

When Anthropic goes public as soon as next month, its initial offering will be more than just a coming-out party for the artificial intelligence company. It will also be a litmus test for the economy, with trillions of dollars at stake.

Anthropic, which makes the Claude chatbot, is a tent pole of the A.I. industry. Valued in the private markets at nearly $1 trillion and backed by more than $130 billion in funding, it could raise $100 billion in its offering and promptly become one of the world’s biggest public companies. But the stakes are even higher than that.

Anthropic and OpenAI, its chief rival, sit atop a pyramid of business partners and suppliers — infrastructure providers, chipmakers, energy companies and A.I. start-ups — that have all spent heavily over the last four years because they believe demand for A.I. products will keep growing.

Anthropic’s listing will provide the first in-depth look at the health of a key business underlying the A.I. boom — and will be a test of its durability. Is there unending appetite for A.I. services to justify the spending on chips, data centers and other infrastructure? Or will Anthropic’s performance show that there are limits?

“For the market, it’s a bellwether,” said Umesh Padval, an investor at Seligman Ventures, who has worked in tech for nearly 40 years.

If Anthropic disappoints in its public debut, that could hurt investor confidence and cascade into a wider market sell-off, casting doubts on how much longer the A.I. boom can go. A successful offering could lift the market and pave the way for more A.I. companies to go public.

Stock markets are already on edge, with technology stocks broadly falling this month, led by a sell-off in the companies that design and produce the computer chips that power A.I. The Philadelphia Semiconductor Index is in a bear market, defined as a decline of 20 percent or more from a recent high and a sign of significant investor angst, after falling 26 percent from its June peak.

Over the last couple of weeks, Microsoft canceled a deal with Nscale, a provider of data centers. A report from the research firm Gartner predicted that 80 percent of “neoclouds,” the companies that provide data and computing power for A.I. firms, could be forced out of business. And Ken Griffin, the billionaire owner of the hedge fund Citadel, said A.I. investors were “almost certainly” in a bubble.

Those negative signals have added to fears about the huge piles of money being spent on A.I. infrastructure. Amazon, Meta, Google and Microsoft have said they plan to spend at least $740 billion on A.I. infrastructure, including data centers, this year. Private market investors have poured $1.1 trillion into Anthropic, OpenAI and other A.I. companies since 2022, according to PitchBook, which tracks investments.

As spending and investment have risen in private markets, public investments have grown, too, increasing the stock market’s reliance on the performance of the A.I. industry. The top 10 stocks in the S&P 500 are worth more than $1 trillion together, with eight of them being tech companies. Combined, the top 10 account for over 40 percent of the index, up from less than 20 percent a decade ago.

When Anthropic is added to the index, it is likely to displace either Berkshire Hathaway or Eli Lilly, the only non-tech companies with valuations above $1 trillion, from the top 10.

“There is a lot riding on this one,” said Brad Gastwirth, the global head of research and market intelligence at Circular Technology, a supply chain services firm. “If it goes bad, it’s going to bring down the market.”

(to be continued)

Translation

Anthropic上市的意義何在？幾乎關乎一切（1/2）

Anthropic 位於由商業夥伴和供應商組成的金字塔頂端，使其成為整體經濟的晴雨表。其首次公開發行（IPO）將產生深遠的影響

Anthropic最快將於下個月上市，其IPO不僅是這家人工智能公司的亮相，更是對經濟的嚴峻考驗，涉及數萬億美元的資金。

Anthropic 是人工智能產業的支柱企業，其開發的聊天機器人 Claude 廣受好評。 Anthropic 在私募市場的估值接近1兆美元，並已獲得超過1,300億美元的融資，如果上市，該公司預計將籌集1,000億美元，迅速成為全球最大的上市公司之一。但其風險遠不止於此。

Anthropic 及其主要競爭對手 OpenAI 都是位於一個龐大的商業夥伴和供應商金字塔的頂端 - 這些合作夥伴和供應商包括基礎設施提供商、晶片製造商、能源公司和人工智能新創公司 - 過去四年裡，他們都投入巨資，因為他們相信對人工智能產品的需求將持續增長。

Anthropic 的上市將首次深入展現支撐人工智能繁榮的關鍵業務的健康狀況，並考驗其持久性。市場對人工智能服務的需求是否永無止境，足以支撐在晶片、数據中心和其他基礎設施上的巨額投入？或者，Anthropic 的表現是否會顯示這種模式有其限制？

在科技業工作近40年的 Seligman Ventures 投資者 Umesh Padval 表示:「對市場而言，這是一個風向標」。

如果 Anthropic 的首次公開發行令人失望，可能會打擊投資者信心，並引發更廣泛的市場拋售，使人們對人工智能熱潮還能持續多久產生懷疑。如果 Anthropic 成功上市，則可能提振市場，並為更多人工智能公司上市鋪路。

股市已經處於緊張狀態，本月科技股普遍下跌，其中以設計和生產人工智能晶片的公司股價下跌最為嚴重。費城半導體指數已進入熊市，熊市的定義是較近期高點下跌20%或更多，這是投資者極度焦慮的標誌，該指數此前已從6月份的高點下跌了26%。

在過去幾週，微軟取消了與數據中心提供商Nscale的交易。研究公司 Gartner 的一份報告預測，為人工智能公司提供數據和運算能力的「新雲端」企業中，80% 可能被迫倒閉。對沖基金 Citadel 的億萬富翁老闆 Ken Griffin 表示，人工智能投資者「幾乎肯定」正處於泡沫之中。

這些負面訊號加劇了人們對人工智能基礎設施巨額投資的擔憂。亞馬遜、Meta、谷歌和微軟均表示，今年計劃在人工智能基礎設施（包括數據中心）上投入至少 7,400 億美元。根據追蹤投資的 PitchBook 數據顯示，自 2022 年以來，私募市場投資者已向 Anthropic、OpenAI 和其他人工智能公司投入了 1.1 兆美元。

隨著私募市場支出和投資的成長，公共投資也在增加，加劇了股市對人工智能產業表現的依賴。標普500指數市值排名前十的股票總市值超過1兆美元，其中八家是科技公司。這十家公司合計佔該指數市值的40%以上，而十年前這一比例還不到20%。

Anthropic 公司一旦被納入該指數，很可能取代 Berkshire Hathaway 或 Eli Lilly，這兩家公司是目前市值超過1兆美元的非科技公司中僅有的兩家，從而跌出前十名。

供應鏈服務公司 Circular Technology 的全球研究和市場情報主管 Brad Gastwirth 表示: “這件事意義重大”，“如果情況惡化，將會拖垮整個市場。”

（待續）

Addressing Plastic Waste on the Seafloor: New Plastic Developed with Embedded Degradation Enzymes

Recently NHK News on-line reported the following:

海底のプラごみ対策 分解酵素混ぜた新たなプラスチック開発

2026年10月25日 5:09

環境

東京大学などの研究グループは、プラスチックの中にあらかじめ分解酵素を混ぜておくことで、海に流出した際の分解を速める新たなプラスチックを開発しました。海底にごみがたまり続ける問題の改善につなげていきたいとしています。

東京大学などの研究グループは、海に流れ込んだプラスチックごみが分解されず海底にたまり続ける問題に対処するため、新たなプラスチックを開発したと発表しました。

発表によりますと、開発されたのは微生物によって分解される「生分解性プラスチック」の一種で、あらかじめ分解酵素が混ぜ込まれているのが特徴です。

プラスチックの断面が水に触れると分解が進むということで、神奈川県三崎沖の水深750メートルあまりの海底に5か月間設置した実験では、ほぼ完全に分解されたことを確認したということです。

また、分解酵素を混ぜていない別の生分解性プラスチックを用いた同様の実験と比べて、30倍以上速く分解されたことがわかったということです。

グループは、あらかじめ混ぜた酵素によって分解されるため、海底にいる微生物の種類に依存することなく、プラスチックを速やかに分解できるとしています。

東京大学大学院農学生命科学研究科の岩田忠久教授は、「海底の厳しい環境で酵素による分解ができたので、海だけでなく山や川といった環境での活用も期待できる。実用化し、ごみがたまり続ける問題を改善したい」と話しています。

Translation

Addressing Plastic Waste on the Seafloor: New Plastic Developed with Embedded Degradation Enzymes

October 25, 2026, 5:09 AM

Environment

A research group, including members from the University of Tokyo, had developed a new type of plastic that contained embedded degradation enzymes, which could accelerate the material's breakdown if it ended up in the ocean. The team hoped this innovation could help address the ongoing issue of plastic waste accumulating on the seafloor.

The research group announced the development of this new plastic to tackle the problem of plastic waste entering the ocean and remaining on the seafloor, where it failed to decompose.

According to the announcement, the material was a type of "biodegradable plastic"—designed to be broken down by microorganisms—a key feature was that decomposing enzymes were pre-mixed into it.

The plastic began to decompose when its cross-section came into contact with water. In an experiment conducted at a depth of over 750 meters off the coast of Misaki, Kanagawa Prefecture, the material was found to have almost completely decomposed after five months on the seafloor.

Furthermore, the material broke down more than 30 times faster than a comparable biodegradable plastic that did not contain the decomposing enzymes.

The research team explained that because the plastic was broken down by the enzymes already present within it, the process could occur rapidly, without relying on the specific types of microorganisms present on the seafloor.

Professor Tadahisa Iwata (岩田忠久) of the University of Tokyo’s Graduate School of Agricultural and Life Sciences stated, "Since the enzymatic degradation proved effective in the harsh environment of the seafloor, this technology could also be applied to not just the sea, but in other environment such as in mountains or rivers. We aim to bring this to practical use and help resolve the persistent problem of waste accumulation."

So, a research group in Japan has developed a new type of plastic that contains embedded decomposing enzymes which could accelerate the material's breakdown if it ends up in the ocean. Apparently, this invention will help address the ongoing issue of plastic waste accumulating on the seafloor.

中國如何成為「近北極國家」？「冰上絲綢之路」背後的中俄角力

 Recently Simon Shen (沈旭暉) published the following article about how China sees itself as a "Near-Arctic State"

【國際關係日評】 中國如何成為「近北極國家」？「冰上絲綢之路」背後的中俄角力

沈旭暉 Simon Shen

https://www.patreon.com/simonshen/posts/

24 Oct 2026

中國提出「一帶一路」多年，除了我們熟悉的陸上絲綢之路、海上絲綢之路，原來還有一條「冰上絲綢之路」。這個名字聽起來有點像政治宣傳的創意比賽，但它確實是中國官方提出的國際戰略。更有喜感的是，中國根本不是北極國家，卻在2018年發表的《中國的北極政策》白皮書中，自稱「近北極國家」（Near-Arctic State），聲稱自己是最接近北極圈的大陸國家之一。

好了，究竟怎樣才算「近北極」？

中國最北端位於黑龍江漠河附近，距離北極圈仍有約1,450公里。按照同一標準，哈薩克、白俄羅斯、波蘭、德國，甚至英國，都比中國更接近北極圈。然而，國際法並沒有「近北極國家」這個正式身份，也沒有規定距離北極多少公里便可以取得特殊權利。北極理事會只有八個成員國，中國與日本、印度、新加坡等國一樣，只是觀察員。2019年，美國國務卿蓬佩奧公開質疑中國的說法，強調北極國家與非北極國家之外，並不存在第三種正式身份。

但中國創造這個概念，並非純粹為了名稱 sexy。隨着全球暖化，北極海冰逐漸減少，沿俄羅斯北部海岸的北方航道開始具有更大的商業潛力。部分中國至歐洲的航線，如果經北極而非蘇彝士運河，航程可以縮短約三分之一。中國既希望減少對馬六甲海峽及傳統印度洋航線的依賴，也希望參與北極能源、礦產及航運規則的制定。所謂「近北極國家」，正是將中國由局外人包裝成北極重要持份者的外交概念。

中國最初嘗試進入北極，並不是單純依靠俄羅斯。2011年，中國富商黃怒波提出以約1,000萬美元購買冰島東北部約306平方公里土地，計劃投資約2億美元興建旅遊度假區及高爾夫球場。這片土地相當於冰島國土約0.3%，引發當地對外國投資及戰略安全的爭論，最終冰島政府依土地法律拒絕交易。中國後來亦曾透過格陵蘭、挪威等地的科研、礦產及基建合作尋找北極入口，但不少項目受到政治或商業阻力。

相比之下，俄羅斯擁有極長的北極海岸線，控制北方航道的重要港口、航行許可及破冰服務，卻一直對中國的北極野心有所戒備。俄羅斯希望外國企業購買能源、投資基建，但不希望非北極國家介入航道管理。這正是中俄在北極問題上的根本矛盾：中國希望北極更加國際化，俄羅斯則堅持沿岸國家的主導地位。

改變局面的，是俄羅斯與西方關係惡化。2014年克里米亞危機後，西方開始限制俄羅斯北極能源開發所需的資金及技術，中國因此成為重要合作對象。2017年投產的亞馬爾液化天然氣項目，中國石油天然氣集團與絲路基金合共持股29.9%。同年，中俄開始正式推動「冰上絲綢之路」，將中國的一帶一路與俄羅斯北方航道發展對接。2022年俄羅斯全面入侵烏克蘭後，西方制裁進一步擴大，俄羅斯在北極能源、船舶及技術的合作選擇更有限，才不得不全面接受中國滲透。

近年中俄在北極的合作，已由能源延伸至航運及安全。2024年，中俄成立北方航道合作分委會，協調航運、基建及航行安全；中國海警亦與俄羅斯邊防船展開北極相關水域聯合巡航。2025年雙方進一步通過航運合作行動計劃，中國企業亦逐步增加北極貨櫃航線。中國不再只是俄羅斯天然氣的買家，而是開始參與北極物流網絡的經營與規劃。

當然，經濟影響力不等於領土主權。俄羅斯仍然掌握北方航道的主要法律管轄、破冰船隊及軍事部署，中國也不會要求俄羅斯割讓北極領土。但如果俄羅斯北極能源愈來愈依靠中國市場，港口建設需要中國投資，貨櫃航運需要中國船隊，俄羅斯即使保留所有主權，還有多大能力拒絕北京的要求？

So, China in its 2018 white paper declared itself a "Near-Arctic State" (「近北極國家」) to legitimize its involvement in the Arctic. Driven by melting sea ice, China seeks to utilize the Northern Sea Route, which would reduce Europe-bound shipping trips by one-third compared to the Suez Canal, while also the benefit in securing regional energy resources. After facing Western resistance in Iceland and Greenland, China leverages its ties with Russia. Russia historically guarded its Arctic sovereignty, but becomes heavily reliant on Chinese capital for projects following Western sanctions due to its war with Ukraine. Today, bilateral cooperation between China and Russia has expanded beyond energy into joint Arctic maritime patrols and logistics planning. Apparently, while Russia retains legal jurisdiction, its economic dependency on China grants the latter an increasing strategic leverage in the region.

Note:

1. Dr. Simon Shen (沈旭暉) is a prominent Hong Kong international relations scholar, political scientist, and public intellectual. He holds a doctorate from the University of Oxford and master’s and bachelor's degrees from Yale University. Known for his expertise in Chinese foreign policy, global affairs, and Hong Kong’s geopolitical positioning, Shen has taught at multiple prestigious universities. He is also a prolific commentator, entrepreneur, and media personality, frequently analyzing global trends and international relations for diverse audiences. (Google)

什麼是 PHP？為什麼政府和企業網站會紛紛下線？ （2/2）

Recently The New York Times reported the following:

What Is PHP? Why Are Government and Business Websites Going Offline? (2/2)

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

By Karla Adam and Dustin Volz (Aaron Krolik contributed reporting)

Oct. 22, 2026

(continue)

Have attacks already started?

The defenders and hackers began racing to protect or compromise systems on Wednesday when the patch was released. But there were signs of an earlier leak from the group of security researchers working to create the fix.

Late Wednesday, Amazon revealed in a blog post that it had data showing that an unknown actor had attempted to use the PHP attack four days before the patch’s release against a honeypot network, or a decoy system, that the company maintains. (A honeypot network tries to catch cybercriminals in the act of doing something nefarious.)

The identity of the attacker was unknown, but the early activity suggested that hackers could have been readying attacks for days before a fix was released.

“It remains unclear how the actor acquired exploit information prior to disclosure,” C.J. Moses, the chief information security officer at Amazon, said in the blog post.

Which sites are affected?

Sites that rely on PHP are vulnerable, which means a good chunk of the internet.

Matthew Prince, the chief executive of CloudFlare, which helps websites secure and manage internet traffic, said in a social media post on Wednesday that the company “saw thousands of attempts to exploit” the flaw in the hours before it was publicly announced.

“That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now,” Mr. Prince added.

Several government websites in Europe and Asia went offline as a precautionary measure.

The Dutch cybersecurity agency, Internet Archive and the operator of Wikipedia took down a number of its systems. In Britain, the prime minister’s office said some government services might be offline on Friday.

On Thursday morning, the website of Finland’s government displayed a message to users: “The websites of the government are fully or partially unavailable. We are currently resolving the issue. Please try again in a moment.”

Prime Minister Sanae Takaichi of Japan urged operators whose sites rely on PHP to apply the patch as soon as possible. For those unable to do so immediately, she wrote on social media, temporarily suspending websites and similar measures could be effective in reducing risk.

Should regular internet users be concerned?

Because PHP is so pervasive, the collateral damage could fall on everyday users whose personal data and essential online services depend on sites staying secure. Consumers could experience online disruptions in the coming days with certain businesses or government services.

Translation

什麼是 PHP？為什麼政府和企業網站會紛紛下線？ （2/2）

支撐大部分網路運行的程式語言 PHP 存在一個嚴重的安全漏洞，這引發了全球修復漏洞系統的熱潮

（繼續）

攻擊已經開始了嗎？

週三修補通知發佈後，防禦者和駭客開始爭分奪秒地保護或攻破系統。但有跡象表明，參與修復的安全研究人員團隊中先前已經有出現早期洩露的跡象。

在週三較晚的時候，亞馬遜在一篇部落格文章中透露，數據顯示，在修補程式發佈前四天，一名身份不明的攻擊者曾試圖利用 PHP 漏洞攻擊該公司維護的蜜罐網路 (honeypot network)（或稱誘餌系統）。 （蜜罐網路旨在抓獲正在進行惡意活動的網絡犯罪者。）

攻擊者的身份尚不清楚，但早期活動表明，駭客可能在漏洞修復程序發佈前數日就開始準備攻擊。

亞馬遜首席資訊安全官 C.J. Moses 在部落格文章中表示：“目前尚不清楚攻擊者是如何在漏洞披露前獲取可利用的資訊。”

哪些網站受到影響？

依賴 PHP 的網站都存在漏洞，這意味著網絡的很大一部分都受到了影響。

CloudFlare 執行長 Matthew Prince 週三在社交媒體上發文稱，該公司在漏洞公開披露前的幾個小時內「發現了數千次利用漏洞的嘗試」。 CloudFlare 是一家幫助網站保護和管理網絡流量的公司。

Prince 補充說： “在公告發布後的 45 分鐘內，嘗試次數激增至數萬次；2 小時內達到數十萬次；現在已達數百萬次。”

作為預防措施，歐洲和亞洲的多個政府網站已暫時下線。

荷蘭網絡安全機構、網絡檔案館和維基百科的營運商關閉了多個系統。在英國，首相辦公室表示，部分政府服務可能在周五離線。

週四上午，芬蘭政府網站向用戶顯示訊息：“政府網站全部或部分無法進入。我們正在解決問題，請稍後再試。”

日本首相高市早苗敦促依賴 PHP 的網站營運商盡快應用補救。她在社交媒體上表示，對於無法立即進行補救的營運商，暫時關閉網站等措施可以有效降低風險。

普通網友是否該擔心？

由於 PHP 應用廣泛，其帶來的附帶損害可能會波及日常用戶，用戶的個人資料和重要的線上服務都依賴網站的安全。未來幾天，消費者在使用某些企業或政府服務時可能會遇到網絡中斷的情況。

So, governments and companies around the world are racing to patch their websites — or taking them offline until they can be fixed — after the discovery of major security flaws in PHP, a piece of software that underpins much of the internet. Many websites are taken down as a protective measure. It is interesting to know that the chief executive of CloudFlare has said that the company “saw thousands of attempts to exploit” the flaw in the hours before it was publicly announced. Apparently, cybercriminals are everywhere.

什麼是 PHP？為什麼政府和企業網站會紛紛下線？ （1/2）

Recently The New York Times reported the following:

What Is PHP? Why Are Government and Business Websites Going Offline? (1/2)

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

By Karla Adam and Dustin Volz (Aaron Krolik contributed reporting)

Oct. 22, 2026

Governments and companies around the world are racing to patch their websites — or taking them offline until they can be fixed — after the discovery of major security flaws in PHP, a piece of software that underpins much of the internet.

OpenAI, whose artificial intelligence models were used to find the bugs, said in a blog post that it was “one of the most impactful security issues in recent memory” given PHP’s widespread use.

While many websites were taken down as a protective measure, as of Thursday afternoon there had not been any confirmed successful attacks using the PHP flaws, according to an analysis by Dataminr, a risk-intelligence cybersecurity company.

“Observed activity since vulnerability disclosure remains limited to scanning, fingerprinting and use of non-working exploits, with no known compromises,” Dataminr said, though it added it was “only a matter of time” before successful intrusions would occur.

What is PHP?

PHP, short for PHP: Hypertext Preprocessor, is a decades-old, open-source programming language that is used to build and run web applications. By some estimates, about 70 percent of all websites and web applications use the software.

Services in which PHP is a core ingredient include content management systems like WordPress and Drupal, which help people run websites. Because PHP is a sort of foundational code baked into so many platforms — think of it as invisible digital infrastructure — many businesses may not even realize they rely on PHP.

How was the flaw discovered?

Security researchers discovered issues in the programming language that could be exploited by an outside attacker.

The bug, which has been hidden in the software for years, was identified by researchers at Calif, a small, U.S.-based cybersecurity company, using OpenAI’s GPT-5.6 Sol model. Researchers from Wiz, an Israeli-American security firm owned by Google, also independently reported the vulnerabilities.

The flaw is the latest to be discovered using advanced A.I. tools, which cybersecurity experts have warned are dangerously effective at finding bugs and weaponizing them. In its blog post, OpenAI said that the discovery of the PHP vulnerability highlighted “how A.I. can uncover security flaws with internet-scale impact, but the same capabilities can also help attackers rapidly develop offensive tools and exploits.”

The company added that, as far as it was aware, “frontier A.I. found these vulnerabilities before attackers did.”

What are the risks?

Given that PHP powers much of the web, security professionals are concerned that hackers could move quickly against unpatched systems, manipulating how they operate and stealing the private data they contain. Experts also cautioned that because the technical details are now public, malicious actors can reverse-engineer a patch to rapidly increase their attempts exploit the vulnerability.

That creates an unusually urgent race to update systems. While A.I. models can help spot vulnerabilities, it can also be used to target many victims at once.

The PHP disclosure was further complicated by a leak before the patch. On Tuesday, details of the bugs were mentioned in a post on a hacker forum, which prompted the nonprofit foundation that oversees the software to release a fix a day earlier than planned.

(to be continued)

Translation

什麼是 PHP？為什麼政府和企業網站會紛紛下線？ （1/2）

支撐大部分網路功能的程式語言 PHP 存在一個嚴重的安全漏洞，引發了全球修復漏洞系統的緊急行動。

在發現 PHP -  一種支撐大部分網路功能的軟件 - 存在重大安全漏洞後，世界各地的政府和企業都在爭分奪秒地修復網站漏洞，或者暫時下線直至修復完成。

OpenAI 的人工智能模型被用來發現這些漏洞。該公司在一篇部落格文章中表示，鑑於 PHP 的廣泛應用，這是「近年來最具影響力的安全問題之一」。

雖然許多網站出於保護目的而暫時關閉，但根據風險情報網路安全公司 Dataminr 的分析，截至週四下午，尚未有任何利用 PHP 漏洞成功發動的攻擊得到證實。

Dataminr 表示：「自漏洞披露以來，觀察到的活動仍然僅限於掃描、指紋識別和使用無效的漏洞，目前尚未發現任何安全漏洞」。不過，該公司也補充說，成功入侵「只是時間問題」。

什麼是 PHP？

PHP，全稱 PHP: Hypertext Preprocessor（超文本預處理器），是一種已有數十年歷史的開源程式語言，用於建置和運行 Web 應用程式。據估計，大約 70% 的網站和 Web 應用程式都使用了這種軟件。

以 PHP 為核心的服務包括 WordPress 和 Drupal 等內容管理系統，這些系統可協助使用者運行網站。由於 PHP 是一種嵌入到眾多平台的基礎程式碼 - 可以將其視為一種隱形的數位基礎設施 - 許多企業甚至可能沒有意識到他們依賴 PHP。

該漏洞是如何被發現的？

安全研究人員發現了該程式語言中有問題可能被外部攻擊者利用。

這個漏洞已在軟件中隱藏多年，由美國小型網路安全公司Calif的研究人員使用OpenAI的GPT-5.6 Sol模型發現。谷歌旗下的以色列-美國安全公司Wiz的研究人員也獨立報告了這個漏洞。

該漏洞是近期利用先進人工智能工具發現的最新漏洞。網絡安全專家警告稱，這些工具在發現漏洞和將其武器化方面極其有效。 OpenAI在其部落格文章中表示，PHP漏洞的發現凸顯了「人工智能如何能夠發現具有達網路規模影響的安全漏洞，但同樣的能力也可能幫助攻擊者快速開發攻擊工具和利用漏洞」。

該公司補充說，據其所知，「前沿人工智能比攻擊者較先發現了這些漏洞」。

風險是什麼？

鑑於PHP驅動大部分網絡應用，安全專家擔心駭客可能會迅速攻擊未修補系統，操縱其運作方式並竊取其中包含的私人資料。專家還警告說，由於技術細節現已公開，惡意攻擊者可以對修補程式進行逆向工程，從而迅速增加利用漏洞的嘗試次數。

這導致競爭系統更新異常激烈。雖然人工智能模型可以幫助發現漏洞，但它也可能即刻被用攻擊多個受害者。

PHP漏洞的洩漏事件在修補程式發佈前就已發生，這使得情況更加複雜。週二，駭客論壇上的一篇貼文提到了這些漏洞的細節，促使負責管理該軟件的非牟利基金會提前一天發佈了修復程式。

（待續）

我們的基因演化是為了抵禦古老的威脅，但在現代社會，其中一些變化可能對我們不利

 Recently The New York Times reported the following:

Where Do Autoimmune Diseases Come From? (2/2)

Our genes evolved to fight ancient threats, but in the modern world, some of those changes may be turning against us.

By David Quammen (David Quammen is a science journalist and author of 19 books. This piece is part of “Disease States,” his new series on evolution and disease.)

Published Oct. 20, 2026, Updated Oct. 22, 2026

(continue)

Today, according to the researchers, those same gene variants seem to be having an opposite effect. With infectious diseases better controlled and the prevalence of M.S. on the rise, “we again observe a striking correlation with changes in our environment, including lifestyle choices and improved hygiene, which no longer favours the previous genetic architecture,” they wrote. In other words, genes that once protected us may now put us at risk.

Another study from an international team of researchers looked at a more recent historical moment of abrupt demographic change: the Black Death. This 14th-century pandemic of plague (caused by the bacterium Yersinia pestis, which is carried by fleas, which are carried by rats) swept through Europe, the Middle East and northern Africa between 1346 and 1353, killing as much as 30 to 50 percent of the population in those areas.

The researchers scrutinized DNA sequences from the dead in England and Denmark, some buried just before the plague years, some during and some after. One of their sources was East Smithfield, a Black Death mass burial site just east of the Tower of London. There and elsewhere, the researchers found four immunity-related gene variants in the genomes of more people buried after the plague than before or during it, suggesting that those variants had conferred a survival advantage. After a dispute of their mathematical methods by another team, the researchers refocused their assertion on one variant. That variant, evidently adaptive against plague, is now a known risk factor for Crohn’s disease. So it seems that the Black Death, like the transition to pastoralism during the Bronze Age, may have been a selective event that increased the jeopardy of future generations to autoimmune diseases.

Although the Oxford team, in its study of M.S., called this situation a case of outdated “genetic architecture,” there’s another metaphor that makes the same point more vividly. Recall the adage about the failings of military leadership: that generals spend their peacetime preparing to fight the last war, rather than the next one. They cling to obsolete tactics and strategies and weaponry — things that worked well in the past — despite the march of time and the arrival of novelties. This is apparently what evolution has done with the gene variants that many of us carry today. Autoimmune diseases in the 21st century may represent the human immune system’s efforts to fight a war that was once cataclysmic and is now less so against ubiquitous and incurable infectious diseases.

For some people, the miseries of M.S. or lupus or other autoimmune maladies is a cruel misfortune. Others are luckier. For instance, me: I have only my psoriasis (inherited from my father, who inherited it from a lineage of Norwegian country people) as a reminder that my own immune system is ready and eager, too eager, to fight the last war — the war between a Bronze Age herdsman and a virus he picked up from one of his goats.

Translation

自體免疫疾病從何而來？ （2/2）

我們的基因演化是為了抵禦古老的威脅，但在現代社會，其中一些變化可能對我們不利

（繼續）

如今，研究人員表示，同樣的基因變異似乎產生了相反的影響。隨著傳染病得到更好的控制，多發性硬化症（MS）的盛行率不斷上升，他們寫道:「我們再次觀察到，這些疾病與環境變化之間存在顯著的相關性，包括生活方式的選擇和衛生條件的改善，而這些變化不再有利於先前的基因結構」。換句話說，曾經保護我們的基因現在可能使我們面臨風險。

另一項由國際研究團隊進行的研究則著重於近期歷史上人口急劇變化的時期：黑死病。 14世紀的鼠疫大流行（由鼠疫耶爾森菌引起，菌由跳蚤攜帶，跳蚤又被老鼠攜帶）在1346年至1353年間席捲歐洲、中東和北非，導致這些地區30%至50%的人口死亡。

研究人員仔細分析了英格蘭和丹麥死者的DNA序列，其中一些死者埋葬於鼠疫爆發前，一些埋葬於鼠疫期間，還有一些埋葬於鼠疫之後。他們的樣本來源之一是East Smithfield，這是位於倫敦塔東側的黑死病萬人坑。研究人員在那裡以及其他地方發現，在鼠疫之後埋葬的人的基因組中，有四種與免疫相關的基因變異，而鼠疫之前或期間埋葬的人的基因組中則沒有這種變異，這表明這些變異賦予了他們生存優勢。在另一研究團隊對他們的數學方法提出質疑後，研究人員將研究重點重新放在其中一種變異上。這種變異顯然具有抵抗鼠疫的適應性，如今已被證實是克隆氏症的已知風險因素之一。因此，黑死病似乎就像青銅時代向畜牧業的過渡一樣，可能是一種選擇性事件，增加了後代罹患自體免疫疾病的風險。

儘管牛津大學的研究團隊在對多發性硬化症 (MS)的研究中將這種情況稱為過時的“基因結構”，但還有另一個比喻能更生動地表達同樣的觀點。想想那句關於軍事領導失敗的諺語：將軍們在和平時期為最後一場戰爭做準備，而不是之後的戰爭。他們固守過時的戰術、戰略和武器 - 那些過去行之有效的方法 - 儘管時代在變遷，新事物層出不窮。這顯然就是進化對我們許多人今天攜帶的基因變異所做的。 21世紀的自體免疫疾病可能代表人類免疫系統試圖對抗一場曾經災難性的戰爭，一場曾經是災難性的戰爭，如今對抗的是無所不在且無法治癒的傳染病，這場戰爭的災難性後果已經減輕。

對某些人來說，多發性硬化症、紅斑性狼瘡或其他自體免疫疾病所帶來的痛苦是一種殘酷的不幸。有些人則幸運得多。例如我：我只有銀屑病（遺傳自我父親，而他又是從挪威鄉村家族遺傳的），它提醒自己的免疫系統隨時準備著，甚至過於渴望地去打那場戰爭- 一場青銅時代牧羊人與他從山羊身上感染的病毒之間的戰爭。

              So, evolution doesn’t have purposes, only results. Darwinian natural selection doesn’t shape creatures to be “better” or “higher” in some objective, transcendent sense — it shapes creatures to succeed in the here and now. And what works in one environment or period of time may prove harmful in another. More specifically, scientists have found evidence of natural selection for certain gene variants during the Bronze Age. Those same variants may increase the risk of autoimmune disease in people who carry them today. Apparently, the Black Death, like the transition to pastoralism during the Bronze Age, may have been a selective event that increased the chance for future generations to have autoimmune diseases.

Note:

1. MS is Multiple Sclerosis (多發性硬化症). It is used in the context of evolutionary medicine to describe a chronic autoimmune disease where the body's immune system mistakenly attacks the central nervous system. The attacks explain how gene variants that once protected ancient humans from infectious diseases have now become risk factors for developing Multiple Sclerosis due to modern hygiene and lifestyle changes.