英國政府網站通過AI發現的漏洞暴露 '神級' 資訊
安全研究員 chris nesbitt-smith 使用 claude 的 ai 模型發現了英國政府代碼中的 100 多個漏洞，使敏感數據面臨風險，因為網路衛生狀況不佳。
security researcher chris nesbitt-smith found over 100 serious vulnerabilities in publicly available uk government code, including in the department of health and social care, home office, and department of education. he used claude's opus and sonnet ai models to identify the issues, which included a 'god-tier' vulnerability in the planning inspectorate's code that gave wide access to sensitive data. the uk government's policy of openly publishing code has led to maintenance and improvement neglect due to funding squeezes. the issues have since been addressed, but the incident highlights the risks of poor cyber hygiene.