Anthropic上市的意義何在？幾乎關乎一切（1/2）

Recently The New York Times reported the following:

What’s Riding on Anthropic’s Market Debut? Nearly Everything. (1/2)

Anthropic sits atop a pyramid of business partners and suppliers, making it a barometer of the broader economy. Its initial public offering will have widespread implications.

By Erin Griffith and Lauren Hirsch - Erin Griffith reported from San Francisco and Lauren Hirsch from New York.

Oct. 26, 2026, 5:02 a.m. ET

When Anthropic goes public as soon as next month, its initial offering will be more than just a coming-out party for the artificial intelligence company. It will also be a litmus test for the economy, with trillions of dollars at stake.

Anthropic, which makes the Claude chatbot, is a tent pole of the A.I. industry. Valued in the private markets at nearly $1 trillion and backed by more than $130 billion in funding, it could raise $100 billion in its offering and promptly become one of the world’s biggest public companies. But the stakes are even higher than that.

Anthropic and OpenAI, its chief rival, sit atop a pyramid of business partners and suppliers — infrastructure providers, chipmakers, energy companies and A.I. start-ups — that have all spent heavily over the last four years because they believe demand for A.I. products will keep growing.

Anthropic’s listing will provide the first in-depth look at the health of a key business underlying the A.I. boom — and will be a test of its durability. Is there unending appetite for A.I. services to justify the spending on chips, data centers and other infrastructure? Or will Anthropic’s performance show that there are limits?

“For the market, it’s a bellwether,” said Umesh Padval, an investor at Seligman Ventures, who has worked in tech for nearly 40 years.

If Anthropic disappoints in its public debut, that could hurt investor confidence and cascade into a wider market sell-off, casting doubts on how much longer the A.I. boom can go. A successful offering could lift the market and pave the way for more A.I. companies to go public.

Stock markets are already on edge, with technology stocks broadly falling this month, led by a sell-off in the companies that design and produce the computer chips that power A.I. The Philadelphia Semiconductor Index is in a bear market, defined as a decline of 20 percent or more from a recent high and a sign of significant investor angst, after falling 26 percent from its June peak.

Over the last couple of weeks, Microsoft canceled a deal with Nscale, a provider of data centers. A report from the research firm Gartner predicted that 80 percent of “neoclouds,” the companies that provide data and computing power for A.I. firms, could be forced out of business. And Ken Griffin, the billionaire owner of the hedge fund Citadel, said A.I. investors were “almost certainly” in a bubble.

Those negative signals have added to fears about the huge piles of money being spent on A.I. infrastructure. Amazon, Meta, Google and Microsoft have said they plan to spend at least $740 billion on A.I. infrastructure, including data centers, this year. Private market investors have poured $1.1 trillion into Anthropic, OpenAI and other A.I. companies since 2022, according to PitchBook, which tracks investments.

As spending and investment have risen in private markets, public investments have grown, too, increasing the stock market’s reliance on the performance of the A.I. industry. The top 10 stocks in the S&P 500 are worth more than $1 trillion together, with eight of them being tech companies. Combined, the top 10 account for over 40 percent of the index, up from less than 20 percent a decade ago.

When Anthropic is added to the index, it is likely to displace either Berkshire Hathaway or Eli Lilly, the only non-tech companies with valuations above $1 trillion, from the top 10.

“There is a lot riding on this one,” said Brad Gastwirth, the global head of research and market intelligence at Circular Technology, a supply chain services firm. “If it goes bad, it’s going to bring down the market.”

(to be continued)

Translation

Anthropic上市的意義何在？幾乎關乎一切（1/2）

Anthropic 位於由商業夥伴和供應商組成的金字塔頂端，使其成為整體經濟的晴雨表。其首次公開發行（IPO）將產生深遠的影響

Anthropic最快將於下個月上市，其IPO不僅是這家人工智能公司的亮相，更是對經濟的嚴峻考驗，涉及數萬億美元的資金。

Anthropic 是人工智能產業的支柱企業，其開發的聊天機器人 Claude 廣受好評。 Anthropic 在私募市場的估值接近1兆美元，並已獲得超過1,300億美元的融資，如果上市，該公司預計將籌集1,000億美元，迅速成為全球最大的上市公司之一。但其風險遠不止於此。

Anthropic 及其主要競爭對手 OpenAI 都是位於一個龐大的商業夥伴和供應商金字塔的頂端 - 這些合作夥伴和供應商包括基礎設施提供商、晶片製造商、能源公司和人工智能新創公司 - 過去四年裡，他們都投入巨資，因為他們相信對人工智能產品的需求將持續增長。

Anthropic 的上市將首次深入展現支撐人工智能繁榮的關鍵業務的健康狀況，並考驗其持久性。市場對人工智能服務的需求是否永無止境，足以支撐在晶片、数據中心和其他基礎設施上的巨額投入？或者，Anthropic 的表現是否會顯示這種模式有其限制？

在科技業工作近40年的 Seligman Ventures 投資者 Umesh Padval 表示:「對市場而言，這是一個風向標」。

如果 Anthropic 的首次公開發行令人失望，可能會打擊投資者信心，並引發更廣泛的市場拋售，使人們對人工智能熱潮還能持續多久產生懷疑。如果 Anthropic 成功上市，則可能提振市場，並為更多人工智能公司上市鋪路。

股市已經處於緊張狀態，本月科技股普遍下跌，其中以設計和生產人工智能晶片的公司股價下跌最為嚴重。費城半導體指數已進入熊市，熊市的定義是較近期高點下跌20%或更多，這是投資者極度焦慮的標誌，該指數此前已從6月份的高點下跌了26%。

在過去幾週，微軟取消了與數據中心提供商Nscale的交易。研究公司 Gartner 的一份報告預測，為人工智能公司提供數據和運算能力的「新雲端」企業中，80% 可能被迫倒閉。對沖基金 Citadel 的億萬富翁老闆 Ken Griffin 表示，人工智能投資者「幾乎肯定」正處於泡沫之中。

這些負面訊號加劇了人們對人工智能基礎設施巨額投資的擔憂。亞馬遜、Meta、谷歌和微軟均表示，今年計劃在人工智能基礎設施（包括數據中心）上投入至少 7,400 億美元。根據追蹤投資的 PitchBook 數據顯示，自 2022 年以來，私募市場投資者已向 Anthropic、OpenAI 和其他人工智能公司投入了 1.1 兆美元。

隨著私募市場支出和投資的成長，公共投資也在增加，加劇了股市對人工智能產業表現的依賴。標普500指數市值排名前十的股票總市值超過1兆美元，其中八家是科技公司。這十家公司合計佔該指數市值的40%以上，而十年前這一比例還不到20%。

Anthropic 公司一旦被納入該指數，很可能取代 Berkshire Hathaway 或 Eli Lilly，這兩家公司是目前市值超過1兆美元的非科技公司中僅有的兩家，從而跌出前十名。

供應鏈服務公司 Circular Technology 的全球研究和市場情報主管 Brad Gastwirth 表示: “這件事意義重大”，“如果情況惡化，將會拖垮整個市場。”

（待續）

Addressing Plastic Waste on the Seafloor: New Plastic Developed with Embedded Degradation Enzymes

Recently NHK News on-line reported the following:

海底のプラごみ対策 分解酵素混ぜた新たなプラスチック開発

2026年10月25日 5:09

環境

東京大学などの研究グループは、プラスチックの中にあらかじめ分解酵素を混ぜておくことで、海に流出した際の分解を速める新たなプラスチックを開発しました。海底にごみがたまり続ける問題の改善につなげていきたいとしています。

東京大学などの研究グループは、海に流れ込んだプラスチックごみが分解されず海底にたまり続ける問題に対処するため、新たなプラスチックを開発したと発表しました。

発表によりますと、開発されたのは微生物によって分解される「生分解性プラスチック」の一種で、あらかじめ分解酵素が混ぜ込まれているのが特徴です。

プラスチックの断面が水に触れると分解が進むということで、神奈川県三崎沖の水深750メートルあまりの海底に5か月間設置した実験では、ほぼ完全に分解されたことを確認したということです。

また、分解酵素を混ぜていない別の生分解性プラスチックを用いた同様の実験と比べて、30倍以上速く分解されたことがわかったということです。

グループは、あらかじめ混ぜた酵素によって分解されるため、海底にいる微生物の種類に依存することなく、プラスチックを速やかに分解できるとしています。

東京大学大学院農学生命科学研究科の岩田忠久教授は、「海底の厳しい環境で酵素による分解ができたので、海だけでなく山や川といった環境での活用も期待できる。実用化し、ごみがたまり続ける問題を改善したい」と話しています。

Translation

Addressing Plastic Waste on the Seafloor: New Plastic Developed with Embedded Degradation Enzymes

October 25, 2026, 5:09 AM

Environment

A research group, including members from the University of Tokyo, had developed a new type of plastic that contained embedded degradation enzymes, which could accelerate the material's breakdown if it ended up in the ocean. The team hoped this innovation could help address the ongoing issue of plastic waste accumulating on the seafloor.

The research group announced the development of this new plastic to tackle the problem of plastic waste entering the ocean and remaining on the seafloor, where it failed to decompose.

According to the announcement, the material was a type of "biodegradable plastic"—designed to be broken down by microorganisms—a key feature was that decomposing enzymes were pre-mixed into it.

The plastic began to decompose when its cross-section came into contact with water. In an experiment conducted at a depth of over 750 meters off the coast of Misaki, Kanagawa Prefecture, the material was found to have almost completely decomposed after five months on the seafloor.

Furthermore, the material broke down more than 30 times faster than a comparable biodegradable plastic that did not contain the decomposing enzymes.

The research team explained that because the plastic was broken down by the enzymes already present within it, the process could occur rapidly, without relying on the specific types of microorganisms present on the seafloor.

Professor Tadahisa Iwata (岩田忠久) of the University of Tokyo’s Graduate School of Agricultural and Life Sciences stated, "Since the enzymatic degradation proved effective in the harsh environment of the seafloor, this technology could also be applied to not just the sea, but in other environment such as in mountains or rivers. We aim to bring this to practical use and help resolve the persistent problem of waste accumulation."

So, a research group in Japan has developed a new type of plastic that contains embedded decomposing enzymes which could accelerate the material's breakdown if it ends up in the ocean. Apparently, this invention will help address the ongoing issue of plastic waste accumulating on the seafloor.

中國如何成為「近北極國家」？「冰上絲綢之路」背後的中俄角力

 Recently Simon Shen (沈旭暉) published the following article about how China sees itself as a "Near-Arctic State"

【國際關係日評】 中國如何成為「近北極國家」？「冰上絲綢之路」背後的中俄角力

沈旭暉 Simon Shen

https://www.patreon.com/simonshen/posts/

24 Oct 2026

中國提出「一帶一路」多年，除了我們熟悉的陸上絲綢之路、海上絲綢之路，原來還有一條「冰上絲綢之路」。這個名字聽起來有點像政治宣傳的創意比賽，但它確實是中國官方提出的國際戰略。更有喜感的是，中國根本不是北極國家，卻在2018年發表的《中國的北極政策》白皮書中，自稱「近北極國家」（Near-Arctic State），聲稱自己是最接近北極圈的大陸國家之一。

好了，究竟怎樣才算「近北極」？

中國最北端位於黑龍江漠河附近，距離北極圈仍有約1,450公里。按照同一標準，哈薩克、白俄羅斯、波蘭、德國，甚至英國，都比中國更接近北極圈。然而，國際法並沒有「近北極國家」這個正式身份，也沒有規定距離北極多少公里便可以取得特殊權利。北極理事會只有八個成員國，中國與日本、印度、新加坡等國一樣，只是觀察員。2019年，美國國務卿蓬佩奧公開質疑中國的說法，強調北極國家與非北極國家之外，並不存在第三種正式身份。

但中國創造這個概念，並非純粹為了名稱 sexy。隨着全球暖化，北極海冰逐漸減少，沿俄羅斯北部海岸的北方航道開始具有更大的商業潛力。部分中國至歐洲的航線，如果經北極而非蘇彝士運河，航程可以縮短約三分之一。中國既希望減少對馬六甲海峽及傳統印度洋航線的依賴，也希望參與北極能源、礦產及航運規則的制定。所謂「近北極國家」，正是將中國由局外人包裝成北極重要持份者的外交概念。

中國最初嘗試進入北極，並不是單純依靠俄羅斯。2011年，中國富商黃怒波提出以約1,000萬美元購買冰島東北部約306平方公里土地，計劃投資約2億美元興建旅遊度假區及高爾夫球場。這片土地相當於冰島國土約0.3%，引發當地對外國投資及戰略安全的爭論，最終冰島政府依土地法律拒絕交易。中國後來亦曾透過格陵蘭、挪威等地的科研、礦產及基建合作尋找北極入口，但不少項目受到政治或商業阻力。

相比之下，俄羅斯擁有極長的北極海岸線，控制北方航道的重要港口、航行許可及破冰服務，卻一直對中國的北極野心有所戒備。俄羅斯希望外國企業購買能源、投資基建，但不希望非北極國家介入航道管理。這正是中俄在北極問題上的根本矛盾：中國希望北極更加國際化，俄羅斯則堅持沿岸國家的主導地位。

改變局面的，是俄羅斯與西方關係惡化。2014年克里米亞危機後，西方開始限制俄羅斯北極能源開發所需的資金及技術，中國因此成為重要合作對象。2017年投產的亞馬爾液化天然氣項目，中國石油天然氣集團與絲路基金合共持股29.9%。同年，中俄開始正式推動「冰上絲綢之路」，將中國的一帶一路與俄羅斯北方航道發展對接。2022年俄羅斯全面入侵烏克蘭後，西方制裁進一步擴大，俄羅斯在北極能源、船舶及技術的合作選擇更有限，才不得不全面接受中國滲透。

近年中俄在北極的合作，已由能源延伸至航運及安全。2024年，中俄成立北方航道合作分委會，協調航運、基建及航行安全；中國海警亦與俄羅斯邊防船展開北極相關水域聯合巡航。2025年雙方進一步通過航運合作行動計劃，中國企業亦逐步增加北極貨櫃航線。中國不再只是俄羅斯天然氣的買家，而是開始參與北極物流網絡的經營與規劃。

當然，經濟影響力不等於領土主權。俄羅斯仍然掌握北方航道的主要法律管轄、破冰船隊及軍事部署，中國也不會要求俄羅斯割讓北極領土。但如果俄羅斯北極能源愈來愈依靠中國市場，港口建設需要中國投資，貨櫃航運需要中國船隊，俄羅斯即使保留所有主權，還有多大能力拒絕北京的要求？

So, China in its 2018 white paper declared itself a "Near-Arctic State" (「近北極國家」) to legitimize its involvement in the Arctic. Driven by melting sea ice, China seeks to utilize the Northern Sea Route, which would reduce Europe-bound shipping trips by one-third compared to the Suez Canal, while also the benefit in securing regional energy resources. After facing Western resistance in Iceland and Greenland, China leverages its ties with Russia. Russia historically guarded its Arctic sovereignty, but becomes heavily reliant on Chinese capital for projects following Western sanctions due to its war with Ukraine. Today, bilateral cooperation between China and Russia has expanded beyond energy into joint Arctic maritime patrols and logistics planning. Apparently, while Russia retains legal jurisdiction, its economic dependency on China grants the latter an increasing strategic leverage in the region.

Note:

1. Dr. Simon Shen (沈旭暉) is a prominent Hong Kong international relations scholar, political scientist, and public intellectual. He holds a doctorate from the University of Oxford and master’s and bachelor's degrees from Yale University. Known for his expertise in Chinese foreign policy, global affairs, and Hong Kong’s geopolitical positioning, Shen has taught at multiple prestigious universities. He is also a prolific commentator, entrepreneur, and media personality, frequently analyzing global trends and international relations for diverse audiences. (Google)

什麼是 PHP？為什麼政府和企業網站會紛紛下線？ （2/2）

Recently The New York Times reported the following:

What Is PHP? Why Are Government and Business Websites Going Offline? (2/2)

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

By Karla Adam and Dustin Volz (Aaron Krolik contributed reporting)

Oct. 22, 2026

(continue)

Have attacks already started?

The defenders and hackers began racing to protect or compromise systems on Wednesday when the patch was released. But there were signs of an earlier leak from the group of security researchers working to create the fix.

Late Wednesday, Amazon revealed in a blog post that it had data showing that an unknown actor had attempted to use the PHP attack four days before the patch’s release against a honeypot network, or a decoy system, that the company maintains. (A honeypot network tries to catch cybercriminals in the act of doing something nefarious.)

The identity of the attacker was unknown, but the early activity suggested that hackers could have been readying attacks for days before a fix was released.

“It remains unclear how the actor acquired exploit information prior to disclosure,” C.J. Moses, the chief information security officer at Amazon, said in the blog post.

Which sites are affected?

Sites that rely on PHP are vulnerable, which means a good chunk of the internet.

Matthew Prince, the chief executive of CloudFlare, which helps websites secure and manage internet traffic, said in a social media post on Wednesday that the company “saw thousands of attempts to exploit” the flaw in the hours before it was publicly announced.

“That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now,” Mr. Prince added.

Several government websites in Europe and Asia went offline as a precautionary measure.

The Dutch cybersecurity agency, Internet Archive and the operator of Wikipedia took down a number of its systems. In Britain, the prime minister’s office said some government services might be offline on Friday.

On Thursday morning, the website of Finland’s government displayed a message to users: “The websites of the government are fully or partially unavailable. We are currently resolving the issue. Please try again in a moment.”

Prime Minister Sanae Takaichi of Japan urged operators whose sites rely on PHP to apply the patch as soon as possible. For those unable to do so immediately, she wrote on social media, temporarily suspending websites and similar measures could be effective in reducing risk.

Should regular internet users be concerned?

Because PHP is so pervasive, the collateral damage could fall on everyday users whose personal data and essential online services depend on sites staying secure. Consumers could experience online disruptions in the coming days with certain businesses or government services.

Translation

什麼是 PHP？為什麼政府和企業網站會紛紛下線？ （2/2）

支撐大部分網路運行的程式語言 PHP 存在一個嚴重的安全漏洞，這引發了全球修復漏洞系統的熱潮

（繼續）

攻擊已經開始了嗎？

週三修補通知發佈後，防禦者和駭客開始爭分奪秒地保護或攻破系統。但有跡象表明，參與修復的安全研究人員團隊中先前已經有出現早期洩露的跡象。

在週三較晚的時候，亞馬遜在一篇部落格文章中透露，數據顯示，在修補程式發佈前四天，一名身份不明的攻擊者曾試圖利用 PHP 漏洞攻擊該公司維護的蜜罐網路 (honeypot network)（或稱誘餌系統）。 （蜜罐網路旨在抓獲正在進行惡意活動的網絡犯罪者。）

攻擊者的身份尚不清楚，但早期活動表明，駭客可能在漏洞修復程序發佈前數日就開始準備攻擊。

亞馬遜首席資訊安全官 C.J. Moses 在部落格文章中表示：“目前尚不清楚攻擊者是如何在漏洞披露前獲取可利用的資訊。”

哪些網站受到影響？

依賴 PHP 的網站都存在漏洞，這意味著網絡的很大一部分都受到了影響。

CloudFlare 執行長 Matthew Prince 週三在社交媒體上發文稱，該公司在漏洞公開披露前的幾個小時內「發現了數千次利用漏洞的嘗試」。 CloudFlare 是一家幫助網站保護和管理網絡流量的公司。

Prince 補充說： “在公告發布後的 45 分鐘內，嘗試次數激增至數萬次；2 小時內達到數十萬次；現在已達數百萬次。”

作為預防措施，歐洲和亞洲的多個政府網站已暫時下線。

荷蘭網絡安全機構、網絡檔案館和維基百科的營運商關閉了多個系統。在英國，首相辦公室表示，部分政府服務可能在周五離線。

週四上午，芬蘭政府網站向用戶顯示訊息：“政府網站全部或部分無法進入。我們正在解決問題，請稍後再試。”

日本首相高市早苗敦促依賴 PHP 的網站營運商盡快應用補救。她在社交媒體上表示，對於無法立即進行補救的營運商，暫時關閉網站等措施可以有效降低風險。

普通網友是否該擔心？

由於 PHP 應用廣泛，其帶來的附帶損害可能會波及日常用戶，用戶的個人資料和重要的線上服務都依賴網站的安全。未來幾天，消費者在使用某些企業或政府服務時可能會遇到網絡中斷的情況。

So, governments and companies around the world are racing to patch their websites — or taking them offline until they can be fixed — after the discovery of major security flaws in PHP, a piece of software that underpins much of the internet. Many websites are taken down as a protective measure. It is interesting to know that the chief executive of CloudFlare has said that the company “saw thousands of attempts to exploit” the flaw in the hours before it was publicly announced. Apparently, cybercriminals are everywhere.

什麼是 PHP？為什麼政府和企業網站會紛紛下線？ （1/2）

Recently The New York Times reported the following:

What Is PHP? Why Are Government and Business Websites Going Offline? (1/2)

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

By Karla Adam and Dustin Volz (Aaron Krolik contributed reporting)

Oct. 22, 2026

Governments and companies around the world are racing to patch their websites — or taking them offline until they can be fixed — after the discovery of major security flaws in PHP, a piece of software that underpins much of the internet.

OpenAI, whose artificial intelligence models were used to find the bugs, said in a blog post that it was “one of the most impactful security issues in recent memory” given PHP’s widespread use.

While many websites were taken down as a protective measure, as of Thursday afternoon there had not been any confirmed successful attacks using the PHP flaws, according to an analysis by Dataminr, a risk-intelligence cybersecurity company.

“Observed activity since vulnerability disclosure remains limited to scanning, fingerprinting and use of non-working exploits, with no known compromises,” Dataminr said, though it added it was “only a matter of time” before successful intrusions would occur.

What is PHP?

PHP, short for PHP: Hypertext Preprocessor, is a decades-old, open-source programming language that is used to build and run web applications. By some estimates, about 70 percent of all websites and web applications use the software.

Services in which PHP is a core ingredient include content management systems like WordPress and Drupal, which help people run websites. Because PHP is a sort of foundational code baked into so many platforms — think of it as invisible digital infrastructure — many businesses may not even realize they rely on PHP.

How was the flaw discovered?

Security researchers discovered issues in the programming language that could be exploited by an outside attacker.

The bug, which has been hidden in the software for years, was identified by researchers at Calif, a small, U.S.-based cybersecurity company, using OpenAI’s GPT-5.6 Sol model. Researchers from Wiz, an Israeli-American security firm owned by Google, also independently reported the vulnerabilities.

The flaw is the latest to be discovered using advanced A.I. tools, which cybersecurity experts have warned are dangerously effective at finding bugs and weaponizing them. In its blog post, OpenAI said that the discovery of the PHP vulnerability highlighted “how A.I. can uncover security flaws with internet-scale impact, but the same capabilities can also help attackers rapidly develop offensive tools and exploits.”

The company added that, as far as it was aware, “frontier A.I. found these vulnerabilities before attackers did.”

What are the risks?

Given that PHP powers much of the web, security professionals are concerned that hackers could move quickly against unpatched systems, manipulating how they operate and stealing the private data they contain. Experts also cautioned that because the technical details are now public, malicious actors can reverse-engineer a patch to rapidly increase their attempts exploit the vulnerability.

That creates an unusually urgent race to update systems. While A.I. models can help spot vulnerabilities, it can also be used to target many victims at once.

The PHP disclosure was further complicated by a leak before the patch. On Tuesday, details of the bugs were mentioned in a post on a hacker forum, which prompted the nonprofit foundation that oversees the software to release a fix a day earlier than planned.

(to be continued)

Translation

什麼是 PHP？為什麼政府和企業網站會紛紛下線？ （1/2）

支撐大部分網路功能的程式語言 PHP 存在一個嚴重的安全漏洞，引發了全球修復漏洞系統的緊急行動。

在發現 PHP -  一種支撐大部分網路功能的軟件 - 存在重大安全漏洞後，世界各地的政府和企業都在爭分奪秒地修復網站漏洞，或者暫時下線直至修復完成。

OpenAI 的人工智能模型被用來發現這些漏洞。該公司在一篇部落格文章中表示，鑑於 PHP 的廣泛應用，這是「近年來最具影響力的安全問題之一」。

雖然許多網站出於保護目的而暫時關閉，但根據風險情報網路安全公司 Dataminr 的分析，截至週四下午，尚未有任何利用 PHP 漏洞成功發動的攻擊得到證實。

Dataminr 表示：「自漏洞披露以來，觀察到的活動仍然僅限於掃描、指紋識別和使用無效的漏洞，目前尚未發現任何安全漏洞」。不過，該公司也補充說，成功入侵「只是時間問題」。

什麼是 PHP？

PHP，全稱 PHP: Hypertext Preprocessor（超文本預處理器），是一種已有數十年歷史的開源程式語言，用於建置和運行 Web 應用程式。據估計，大約 70% 的網站和 Web 應用程式都使用了這種軟件。

以 PHP 為核心的服務包括 WordPress 和 Drupal 等內容管理系統，這些系統可協助使用者運行網站。由於 PHP 是一種嵌入到眾多平台的基礎程式碼 - 可以將其視為一種隱形的數位基礎設施 - 許多企業甚至可能沒有意識到他們依賴 PHP。

該漏洞是如何被發現的？

安全研究人員發現了該程式語言中有問題可能被外部攻擊者利用。

這個漏洞已在軟件中隱藏多年，由美國小型網路安全公司Calif的研究人員使用OpenAI的GPT-5.6 Sol模型發現。谷歌旗下的以色列-美國安全公司Wiz的研究人員也獨立報告了這個漏洞。

該漏洞是近期利用先進人工智能工具發現的最新漏洞。網絡安全專家警告稱，這些工具在發現漏洞和將其武器化方面極其有效。 OpenAI在其部落格文章中表示，PHP漏洞的發現凸顯了「人工智能如何能夠發現具有達網路規模影響的安全漏洞，但同樣的能力也可能幫助攻擊者快速開發攻擊工具和利用漏洞」。

該公司補充說，據其所知，「前沿人工智能比攻擊者較先發現了這些漏洞」。

風險是什麼？

鑑於PHP驅動大部分網絡應用，安全專家擔心駭客可能會迅速攻擊未修補系統，操縱其運作方式並竊取其中包含的私人資料。專家還警告說，由於技術細節現已公開，惡意攻擊者可以對修補程式進行逆向工程，從而迅速增加利用漏洞的嘗試次數。

這導致競爭系統更新異常激烈。雖然人工智能模型可以幫助發現漏洞，但它也可能即刻被用攻擊多個受害者。

PHP漏洞的洩漏事件在修補程式發佈前就已發生，這使得情況更加複雜。週二，駭客論壇上的一篇貼文提到了這些漏洞的細節，促使負責管理該軟件的非牟利基金會提前一天發佈了修復程式。

（待續）

我們的基因演化是為了抵禦古老的威脅，但在現代社會，其中一些變化可能對我們不利

 Recently The New York Times reported the following:

Where Do Autoimmune Diseases Come From? (2/2)

Our genes evolved to fight ancient threats, but in the modern world, some of those changes may be turning against us.

By David Quammen (David Quammen is a science journalist and author of 19 books. This piece is part of “Disease States,” his new series on evolution and disease.)

Published Oct. 20, 2026, Updated Oct. 22, 2026

(continue)

Today, according to the researchers, those same gene variants seem to be having an opposite effect. With infectious diseases better controlled and the prevalence of M.S. on the rise, “we again observe a striking correlation with changes in our environment, including lifestyle choices and improved hygiene, which no longer favours the previous genetic architecture,” they wrote. In other words, genes that once protected us may now put us at risk.

Another study from an international team of researchers looked at a more recent historical moment of abrupt demographic change: the Black Death. This 14th-century pandemic of plague (caused by the bacterium Yersinia pestis, which is carried by fleas, which are carried by rats) swept through Europe, the Middle East and northern Africa between 1346 and 1353, killing as much as 30 to 50 percent of the population in those areas.

The researchers scrutinized DNA sequences from the dead in England and Denmark, some buried just before the plague years, some during and some after. One of their sources was East Smithfield, a Black Death mass burial site just east of the Tower of London. There and elsewhere, the researchers found four immunity-related gene variants in the genomes of more people buried after the plague than before or during it, suggesting that those variants had conferred a survival advantage. After a dispute of their mathematical methods by another team, the researchers refocused their assertion on one variant. That variant, evidently adaptive against plague, is now a known risk factor for Crohn’s disease. So it seems that the Black Death, like the transition to pastoralism during the Bronze Age, may have been a selective event that increased the jeopardy of future generations to autoimmune diseases.

Although the Oxford team, in its study of M.S., called this situation a case of outdated “genetic architecture,” there’s another metaphor that makes the same point more vividly. Recall the adage about the failings of military leadership: that generals spend their peacetime preparing to fight the last war, rather than the next one. They cling to obsolete tactics and strategies and weaponry — things that worked well in the past — despite the march of time and the arrival of novelties. This is apparently what evolution has done with the gene variants that many of us carry today. Autoimmune diseases in the 21st century may represent the human immune system’s efforts to fight a war that was once cataclysmic and is now less so against ubiquitous and incurable infectious diseases.

For some people, the miseries of M.S. or lupus or other autoimmune maladies is a cruel misfortune. Others are luckier. For instance, me: I have only my psoriasis (inherited from my father, who inherited it from a lineage of Norwegian country people) as a reminder that my own immune system is ready and eager, too eager, to fight the last war — the war between a Bronze Age herdsman and a virus he picked up from one of his goats.

Translation

自體免疫疾病從何而來？ （2/2）

我們的基因演化是為了抵禦古老的威脅，但在現代社會，其中一些變化可能對我們不利

（繼續）

如今，研究人員表示，同樣的基因變異似乎產生了相反的影響。隨著傳染病得到更好的控制，多發性硬化症（MS）的盛行率不斷上升，他們寫道:「我們再次觀察到，這些疾病與環境變化之間存在顯著的相關性，包括生活方式的選擇和衛生條件的改善，而這些變化不再有利於先前的基因結構」。換句話說，曾經保護我們的基因現在可能使我們面臨風險。

另一項由國際研究團隊進行的研究則著重於近期歷史上人口急劇變化的時期：黑死病。 14世紀的鼠疫大流行（由鼠疫耶爾森菌引起，菌由跳蚤攜帶，跳蚤又被老鼠攜帶）在1346年至1353年間席捲歐洲、中東和北非，導致這些地區30%至50%的人口死亡。

研究人員仔細分析了英格蘭和丹麥死者的DNA序列，其中一些死者埋葬於鼠疫爆發前，一些埋葬於鼠疫期間，還有一些埋葬於鼠疫之後。他們的樣本來源之一是East Smithfield，這是位於倫敦塔東側的黑死病萬人坑。研究人員在那裡以及其他地方發現，在鼠疫之後埋葬的人的基因組中，有四種與免疫相關的基因變異，而鼠疫之前或期間埋葬的人的基因組中則沒有這種變異，這表明這些變異賦予了他們生存優勢。在另一研究團隊對他們的數學方法提出質疑後，研究人員將研究重點重新放在其中一種變異上。這種變異顯然具有抵抗鼠疫的適應性，如今已被證實是克隆氏症的已知風險因素之一。因此，黑死病似乎就像青銅時代向畜牧業的過渡一樣，可能是一種選擇性事件，增加了後代罹患自體免疫疾病的風險。

儘管牛津大學的研究團隊在對多發性硬化症 (MS)的研究中將這種情況稱為過時的“基因結構”，但還有另一個比喻能更生動地表達同樣的觀點。想想那句關於軍事領導失敗的諺語：將軍們在和平時期為最後一場戰爭做準備，而不是之後的戰爭。他們固守過時的戰術、戰略和武器 - 那些過去行之有效的方法 - 儘管時代在變遷，新事物層出不窮。這顯然就是進化對我們許多人今天攜帶的基因變異所做的。 21世紀的自體免疫疾病可能代表人類免疫系統試圖對抗一場曾經災難性的戰爭，一場曾經是災難性的戰爭，如今對抗的是無所不在且無法治癒的傳染病，這場戰爭的災難性後果已經減輕。

對某些人來說，多發性硬化症、紅斑性狼瘡或其他自體免疫疾病所帶來的痛苦是一種殘酷的不幸。有些人則幸運得多。例如我：我只有銀屑病（遺傳自我父親，而他又是從挪威鄉村家族遺傳的），它提醒自己的免疫系統隨時準備著，甚至過於渴望地去打那場戰爭- 一場青銅時代牧羊人與他從山羊身上感染的病毒之間的戰爭。

              So, evolution doesn’t have purposes, only results. Darwinian natural selection doesn’t shape creatures to be “better” or “higher” in some objective, transcendent sense — it shapes creatures to succeed in the here and now. And what works in one environment or period of time may prove harmful in another. More specifically, scientists have found evidence of natural selection for certain gene variants during the Bronze Age. Those same variants may increase the risk of autoimmune disease in people who carry them today. Apparently, the Black Death, like the transition to pastoralism during the Bronze Age, may have been a selective event that increased the chance for future generations to have autoimmune diseases.

Note:

1. MS is Multiple Sclerosis (多發性硬化症). It is used in the context of evolutionary medicine to describe a chronic autoimmune disease where the body's immune system mistakenly attacks the central nervous system. The attacks explain how gene variants that once protected ancient humans from infectious diseases have now become risk factors for developing Multiple Sclerosis due to modern hygiene and lifestyle changes.

我們的基因演化是為了對抗古老的威脅，但在現代社會，其中一些變化可能對我們不利

Recently The New York Times reported the following:

Where Do Autoimmune Diseases Come From? (1/2)

Our genes evolved to fight ancient threats, but in the modern world, some of those changes may be turning against us.

The NYT - By David Quammen (David Quammen is a science journalist and author of 19 books. This piece is part of “Disease States,” his new series on evolution and disease.)

Published Oct. 20, 2026, Updated Oct. 22, 2026

Evolution doesn’t have purposes, only results. Darwinian natural selection doesn’t shape creatures to be “better” or “higher” in some objective, transcendent sense — it shapes creatures to succeed in the here and now. And what works in one environment or period of time may prove harmful in another. Some scientists say this fact of evolution might help explain the origins of human autoimmune diseases.

They are a bit mysterious, autoimmune diseases, but far from rare. They include multiple sclerosis, rheumatoid arthritis, Type 1 diabetes, lupus, Crohn’s disease, psoriasis and possibly more than 100 others. Some of them cause misery, some discomfort and inconvenience and some can be fatal. What these conditions share is that, for reasons still unclear, a person’s immune cells begin attacking the body’s own tissues and organs instead of just defending against invaders like viruses and bacteria.

Autoimmune diseases are believed to affect about 15 million people in the United States and between 5 and 10 percent of the population of industrialized countries, as well as a smaller percentage in developing countries. And the numbers are rising, probably because of environmental factors, including diet and pollutants, which play a role in setting off these illnesses. But genetic factors likely play a role, too, and that’s where research in recent years has revealed an intriguing pattern.

Autoimmune diseases may arise partly from the action of genes and gene combinations that were valuable at earlier stages of human history but are now disadvantageous. More specifically, scientists have found evidence of natural selection for certain gene variants during the Bronze Age, which began about 5,000 years ago and spanned two millenniums. Those same variants may increase the risk of autoimmune disease in people who carry them today. The term for such opposing effects is “antagonistic pleiotropy,” and a simple way of explaining it is that sometimes a gene helps, and other times it harms.

Why would some gene variants perform a valuable service for ancient humans but be a disservice now? One answer, supported by recent studies that draw on genetic sequencing of ancient human DNA and comparisons of those sequences with modern genomes, involves infectious disease.

During those earlier millenniums, humans transitioned from being hunter-gatherers in small, mobile bands to two other ways of living: as farmers and as pastoralists. Farmers were sedentary. Pastoralists turned wild animals into cattle, sheep and goats, and traveled across wide areas so their livestock could graze. Farming brought people into close contact with plants. Pastoralism brought people into close contact with the viruses, bacteria and other infectious agents that wild (and then domesticated) animals carry.

Many of those pathogens crossed into the pastoralists, creating what are now called zoonotic diseases — animal infections that spill over to humans. Survival against such disease threats involved luck and genes. Natural selection culled out the unlucky, leaving populations of survivors who carried lucky gene variants that offered resistance against the infections. 

But those protective gene variants of the Bronze Age, it now seems, may have a negative effect in our modern era of good sanitation systems, antibiotics, antiseptics and other infection control measures. By increasing the sensitivity of the immune system to an extreme level, they have become risk factors for autoimmune diseases. That’s the antagonistic pleiotropy hypothesis anyway.

And scientists have found evidence to support it. Researchers at the University of Oxford and their collaborators elsewhere reported a strong correlation between certain gene variants that spread rapidly among European populations around 5,000 years ago and those linked to an elevated chance of having multiple sclerosis today. The variants became more common as migrant pastoralists from the Eurasian steppe began arriving in Europe. Most of those gene variants delivered some protection against certain viral and bacterial infections, or against parasites, helping humans to adapt not just to the pastoral lifestyle, but to increases in population density, which intensified the transmission and circulation of infectious diseases.

(to be continued)

自體免疫疾病從何而來？ （1/2）

我們的基因演化是為了對抗古老的威脅，但在現代社會，其中一些變化可能對我們不利

進化沒有目的，只有結果。達爾文的自然選擇 並非塑造生物體使其在某種客觀、超越日常經驗的意義上“更好”或“更高”，而是塑造生物體使其在當下取得成功。在一個特定環境或時期有效，在另一種環境或時期可能有害。一些科學家認為，演化的事實或許有助於解釋人類自體免疫疾病的起源。

自體免疫疾病有些神秘，但絕非罕見。這些疾病包括多發性硬化症、類風濕性關節炎、第1型糖尿病、紅斑性狼瘡、克隆氏症、乾癬，以及其他可能超過100種的疾病。有些疾病會造成痛苦，有些會造成不適和不便，有些則可能致命。這些疾病的共同點在於，由於一些尚未明確的原因，人體的免疫細胞開始攻擊自身的組織和器官，而不是像正常情況下那樣抵抗病毒和細菌等入侵者。

美國相信約有1,500萬人患有自體免疫疾病，已開發國家的盛行率在5%到10%之間，發展中國家的盛行率則更低。而且，患病人數還在上升，這可能是由於環境因素，包括飲食和污染物，在誘發這些疾病方面發揮了作用。但遺傳因素也可能發揮了作用，而近年來，研究揭示了一種有趣的模式。

自體免疫疾病的出現可能部分源自於某些基因及其組合的作用，這些基因在人類歷史早期階段具有重要價值，但如今卻有害。更具體地說，科學家發現了青銅時代（始於約5,000年前，持續兩千年）某些基因變異受到自然選擇的證據。如今，攜帶這些變異的人群罹患自體免疫疾病的風險可能會增加。這種相反的作用被稱為“拮抗性多效性”(antagonistic pleiotropy)，簡單來說就是一個基因有時有益，有時卻有害。

為什麼有些基因變異對古代人類有益，但如今卻有害呢？近期一些研究利用古代人類DNA的基因定序，並將這些序列與現代基因組進行比較，得出的答案之一與傳染病有關。

在早期的幾千年裡，人類從小型遊牧部落的狩獵採集生活方式過渡到另外兩種生活方式：農業和畜牧。農業是定居的。牧民將野生動物馴化成牛、羊和山羊，並遷移到廣闊的地區放牧。農業使人們與植物密切接觸。而畜牧業則使人們與野生（後來是家養）動物攜帶的病毒、細菌和其他病原體密切接觸。

許多病原體透過畜牧業傳播到牧民身上，形成瞭如今被稱為人畜共患病的疾病 - 動物受到感染後傳染給人類的疾病。抵禦此類疾病威脅的生存取決於運氣和基因。自然選擇 淘汰了不幸者，留下了攜帶幸運基因變異的倖存者，這些基因變異能夠抵抗感染。

但現在看來，這些青銅時代的保護性基因變異，在我們這個擁有良好衛生系統、抗生素、消毒劑和其他感染控制措施的現代社會，可能產生了負面影響。它們將免疫系統的敏感性提高到極致，從而成為自體免疫疾病的危險因子。這就是拮抗性多效性假設。

科學家已經找到了支持這項假設的證據。牛津大學的研究人員及其合作者報告稱，大約5,000年前在歐洲人群中迅速傳播的某些基因變異，與如今多發性硬化症高發生風險相關的基因變異之間存在很強的相關性。隨著來自歐亞草原的牧民遷移到歐洲，這些基因變異變得越來越普遍。大多數基因變異能夠提供一定的保護，抵抗某些病毒、細菌感染或寄生蟲，幫助人類不僅適應了遊牧生活方式，也適應了人口密度增加帶來的傳染病傳播和加劇擴散。

 （待續）

Note:

1. Antagonistic pleiotropy (拮抗性多效性) is a theory in evolutionary biology that holds that certain genes confer beneficial effects early in an organism's life, enhancing survival or fertility, while also causing detrimental effects later in life. It provides an explanation for why some genes are not eliminated by natural selection even though they are associated with catastrophic health outcomes, especially in older age. (Wikipedia)

2. Darwinian natural selection (自然選擇) theories that evolution doesn’t have purposes, it doesn’t shape creatures to be “better” or “higher” in some objective, transcendent sense — it only shapes creatures to succeed in the here and now.