英国政府网站通过AI发现的漏洞暴露 '神级' 信息
安全研究员 chris nesbitt-smith 使用 claude 的 ai 模型发现了英国政府代码中的 100 多个漏洞，使敏感数据面临风险，因为网络卫生状况不佳。
security researcher chris nesbitt-smith found over 100 serious vulnerabilities in publicly available uk government code, including in the department of health and social care, home office, and department of education. he used claude's opus and sonnet ai models to identify the issues, which included a 'god-tier' vulnerability in the planning inspectorate's code that gave wide access to sensitive data. the uk government's policy of openly publishing code has led to maintenance and improvement neglect due to funding squeezes. the issues have since been addressed, but the incident highlights the risks of poor cyber hygiene.