George Kurtz

Kurtz 表示，全球 AI 的快速普及正在扩大需要防护的攻击面。

全球对 AI 的采用正在迅速扩大攻击面。

原文 (en)

The world's adoption of AI is rapidly expanding the attack surface

George Kurtz 认为 AI 安全是充分发挥 AI 价值的前提，部署带终止开关的智能体能让企业保持掌控。

“AI 安全是让你充分获得 AI 全部收益的途径。”CEO George Kurtz 在新闻稿中表示。“当你部署带有终止开关的智能体时，你就始终掌控局面。”

原文 (en)

“AI safety is how you get the full benefit of AI,” said CEO George Kurtz in a press release. “When you deploy agents with a kill switch, you stay in control.”

George Kurtz 表示，各家公司都在问 AI 智能体能否被叫停，而 CrowdStrike 的 AI 终止开关让答案变成了肯定。

每家公司都在问关于 AI 智能体的同一个问题：它们能被叫停吗？现在答案是肯定的。

原文 (en)

Every company is asking the same question about AI agents: can they be stopped? Now the answer is yes,

Kurtz 称 CrowdStrike 的 AI 终止开关为智能体补上了缺失的关闭按钮，是智能体安全运行的关键一环。

“人人都在构建 AI 智能体，但它们从来没有关闭按钮，现在有了。这将是确保 AI 智能体安全运行的极其重要的一环。”

原文 (en)

"Everyone is building AI agents, but they never had the off button, and now they do," Kurtz told CNBC's Jim Cramer on "Mad Money." "It's going to be an incredibly important part of making sure that AI agents run and operate safely."

Kurtz 认为保障智能体安全是巨大的市场机会，既能防外部入侵，也能约束智能体行为。

“让智能体安全工作对 CrowdStrike 来说是巨大的市场机会。我们有 AI 能力从外部防止这些入侵，也有能力确保智能体基本上按指令行事。”

原文 (en)

"Enabling agents to work safely is a massive market opportunity for CrowdStrike," Kurtz said. "We have AI capabilities to prevent these breaches from happening on the outside, and we also have the capabilities to make sure that agents are basically doing what they are instructed to do."

Kurtz 把终止开关比作安全气囊，称即便 AI 设计正确也需要保障措施，越界的智能体可在运行时被终止。

他说：“如果它们在运行时越出这些护栏，我们可以终止这些智能体。”

原文 (en)

"If they go outside of those guardrails at runtime, we can kill those agents," he said.

Kurtz 称企业客户要求在部署 Anthropic 产品前集成 CrowdStrike，说明对其安全产品需求强劲。

“我们的客户去找 Anthropic 说，‘在部署 AI 之前我们需要 CrowdStrike’。客户没有 CrowdStrike 就不愿推出 AI，这说明了很多。”

原文 (en)

"Our customers went to Anthropic and said, 'We need CrowdStrike before we can deploy AI,'" Kurtz said. "I think it says volumes that customers would not roll out AI without CrowdStrike."

Kurtz 认为 AI 安全（如智能体终止开关）能让企业充分获得 AI 的收益，安全因此同时成为技术采用的加速器和安全网。

AI 安全是充分获得 AI 全部收益的途径。当你为智能体部署了终止开关，你就能保持掌控。安全首次同时成为技术采用的加速器和安全网。

原文 (en)

AI safety is how you get the full benefit of AI. When you deploy agents with a kill switch, you stay in control. For the first time, security is simultaneously the accelerant and the safety net for technology adoption.

Kurtz 认为 AI 安全是充分发挥 AI 价值的前提，部署带终止开关的智能体能让企业保持控制权。

AI 安全是你充分获得 AI 全部收益的途径。当你部署带有“终止开关”的智能体时，你就始终掌控局面。

原文 (en)

AI safety is how you get the full benefit of AI. When you deploy agents with a kill switch, you stay in control,

Kurtz 表示企业将必须配备 AI 智能体的终止开关，CrowdStrike 同时推出了可检测、监控并停止智能体的工具。

“我认为对企业来说，终止开关将是必须具备的。”Kurtz 说。

原文 (en)

“I think the kill switch will be mandatory for companies,” Kurtz said.

Kurtz认为AI智能体成为新的顶级威胁，使任何攻击者都具备国家级能力。

现在出现了新的顶级掠食者，那就是智能体。我称之为“智能体国家”的崛起。当顶级能力变成一条提示词时，就不再有层级之分，每个对手、每个电子犯罪团伙、每个内部人员都能像国家级对手一样行动。

原文 (en)

Now there's a new apex predator and that's the agent. I call this the rise of the agent state. Because when Apex capability becomes a prompt, there are no tears at all. Every adversary, every ecime crew, every insider now can operate like a nation state.

Kurtz称攻击已进入推理速度，突破时间消失，零日变成“负一日”。

攻击现在以推理速度发生。当攻击者拥有推理速度时，就没有突破时间了，实际上根本没有时间。我们将不再称之为零日，而是“负一日”。

原文 (en)

Attacks now happen at inference speed. Inference speed. And when the attacker has inference speed, there is no breakout time. There's actually no time at all. And unfortunately, we won't be calling these zero days. We'll be calling them minus one days.

Kurtz认为放慢AI发展无济于事，前沿和开放权重模型已落入对手手中。

我们现在面临的挑战是精灵已经出了瓶。放慢未来AI发展无法解决眼前的风险，前沿模型和开放权重模型无处不在，包括在对手手中。

原文 (en)

The challenge we have now is the genie is out of the bottle. Slowing down future AI development won't fix the risk in front of us. Frontier and open weight models are literally everywhere including in the hands of the adversary.

Kurtz把从安全到AI安全保障的转变定位为企业加速器而非刹车。

安全过去是把所有人挡在外面，而“安全保障”是让组织跑得更快。它不是刹车，而是让你能运行智能体并加速的东西。

原文 (en)

Security was keep everyone out. Safety is allow our organizations to go faster. And safety isn't the brakes. It's what allows you to run agents and go faster.

Kurtz认为堆token时代将结束，开放权重模型将推动降本与数据主权。

我认为一味堆token的时代可能结束了，现在越来越多人关心如何降低成本。在我看来，开放权重模型将是降低成本和实现数据主权的关键领域之一。

原文 (en)

I think all the token maxing might be over. And in fact, now we're hearing more and more on how do we reduce cost. And in my view, open weight models are going to be one of the key areas to help reduce cost and drive this data sovereignty.

Kurtz预测本地终端运行开放权重模型将大幅增长。

我的预测是：直接在终端上运行的开放权重模型将大幅增加。你可以在桌面电脑上运行280亿参数的Qwen模型。

原文 (en)

So here's my prediction. I think there's going to be a massive increase in openw weight models running directly on the endpoint. You can run a 28 billion parameter Quinn model on your desktop.

Kurtz指出通用AI不适合防御者，需要专为防御打造的AI，由此推动CrowdStrike的实验室和模型。

所以地球上最好的AI是为除防御者之外的所有人打造的。通用模型是为通用目的构建的，我们需要为防御者打造的AI。

原文 (en)

So the best AI on earth was built for everyone except the defenders for everyone in this audience. General purpose models are built for general purpose and we need everyone in this room needs AI built for the defender.

Kurtz 警告称，缺乏安全保障的 AI 会给对手可乘之机，安全必须从一开始就内置于 AI 基础设施中。

“每家企业都在争相构建 AI，但没有安全保障的 AI 就是给对手的机会。在 AI 驱动的世界里，安全不能事后才考虑。”

原文 (en)

“Every enterprise is racing to build AI, but AI without security is an opportunity for the adversary,” Kurtz said. VIEW ALL “Security cannot be an afterthought in an AI-powered world.

Kurtz 称 Falcon 的 AI 原生防护将成为 Dell 与 NVIDIA AI Factory 的基础，让企业能安全地规模化创新。

Dell 和 NVIDIA 在推动 AI 革命，而 CrowdStrike 在为其提供安全保障。我们共同让 Falcon 的 AI 原生防护成为 AI Factory 的基础，让企业有信心在经过验证的优化架构上安全地规模化创新。

原文 (en)

Dell and NVIDIA are powering the AI revolution, and CrowdStrike is securing it. Together, we’re making Falcon’s AI-native protection foundational to the AI Factory, giving enterprises the confidence to safely innovate at scale on validated, optimised architectures.

Kurtz 称所有企业都将依赖 AI，保障 AI 安全是 CrowdStrike 历史上最大的市场机会。

Kurtz 表示，每家企业都将运行在 AI 之上，而保障 AI 安全是公司历史上最大的市场机会。

原文 (en)

Kurtz said every enterprise will run on AI and that securing it is the largest market opportunity in the company’s history.

George Kurtz 警告称，缺乏安全的 AI 会给攻击者可乘之机，安全必须从一开始就内置。

“每家企业都在竞相构建 AI，但没有安全保障的 AI 就是给对手的机会。在 AI 驱动的世界里，安全不能事后才考虑。”

原文 (en)

“Every enterprise is racing to build AI, but AI without security is an opportunity for the adversary,” said George Kurtz, CEO and founder of CrowdStrike. “Security cannot be an afterthought in an AI-powered world.

George Kurtz警告称，随着AI模型进步，当下看似难以利用的漏洞很快可能变得易于利用。

如今看似难以利用的漏洞，随着模型进步，明天可能就很容易被利用。

原文 (en)

What seems impractical to exploit today could easily be exploitable tomorrow as models advance.

George Kurtz表示，CrowdStrike观察到的AI驱动攻击从7月到9月每月翻倍。

CrowdStrike观察到的AI驱动攻击在7月至9月间每月翻倍。

原文 (en)

AI-powered attacks observed by CrowdStrike doubled each month from July through September.

George Kurtz 表示，AI 证明了存在近二十年的 PHP 漏洞可被利用，数千万台服务器面临风险，迫使业界进入极快的补丁周期，未打补丁的旧路由器和防火墙将在未来数月引发大规模入侵。

他强调说：“你需要关注手表，而不是日历。”

原文 (en)

He emphasized, "You need to focus on the watch, not the calendar."

Kurtz警告称，新曝光的PHP漏洞将在未来几个月引发大量入侵，影响数千万台联网服务器。

CrowdStrike CEO George Kurtz周五警告称，近期曝光的PHP漏洞将在未来几个月导致大量入侵事件。Kurtz表示，数千万台暴露在互联网上的服务器受到影响。

原文 (en)

CrowdStrike CEO George Kurtz warned on Friday that the recently exposed PHP vulnerabilities will cause many breaches in the coming months. Kurtz said tens of millions of servers exposed to the internet are affected.

库尔茨表示，AI 发现的 PHP 漏洞影响数千万台联网服务器。

CrowdStrike 首席执行官乔治·库尔茨周五对 CNBC 表示：“这影响到数千万台面向互联网的服务器。”

原文 (en)

"This affects tens of millions of internet-facing servers," CrowdStrike CEO George Kurtz told CNBC on Friday.

库尔茨警告称，由于补丁不完整且旧版本仍在使用，未来几个月将出现大量由 PHP 漏洞引发的入侵。

库尔茨警告说：“未来几个月你会看到由此引发大量入侵事件。”

原文 (en)

"You're going to see a lot of breaches happening in the coming months from this," Kurtz warned.

库尔茨称，AI 攻击在 7 至 9 月每月翻倍，不使用防御性 AI 将难以为继，这正是 CrowdStrike 的重点。

他说：“除非你使用防御性 AI 来对抗进攻方的行为，否则几乎难以为继，而这正是 CrowdStrike 的专注方向。”

原文 (en)

"It almost becomes unsustainable unless you're using defensive AI to be able to combat what the offense is doing, and that's what CrowdStrike is focused on," he said.

Kurtz 警告称，AI 发现的 PHP 漏洞属于漏洞长尾效应的一部分，由于大量旧版 PHP 和老旧联网设备永远不会被修补，未来几个月将出现大量入侵事件。

“这是我们所看到的这类漏洞长尾效应的一部分，”Kurtz 说。“未来几个月你会看到由此引发的大量入侵事件。”

原文 (en)

"This is part of the long tail of these vulnerabilities that we see," Kurtz says. "You're going to see a lot of breaches happening in the coming months from this."

Kurtz警告称PHP漏洞影响数千万台联网服务器，且AI已证明能够利用这些存在近20年的漏洞。

这影响到数千万台可通过互联网访问的服务器。这些漏洞存在已久，有几个已有近20年历史。而人工智能现在已经证明了利用这些漏洞的能力。

原文 (en)

This affects tens of millions of servers accessible over the internet. This is a vulnerability that has been around for a long time, several vulnerabilities that are almost 20 years old. And artificial intelligence has now proven the ability to exploit this vulnerability.

Kurtz称使用过时PHP的旧路由器、防火墙等设备永远不会被修复，未来几个月将出现大量入侵事件。

最棘手、我认为人们谈论得还不够的，是所有使用过时PHP版本的旧联网设备，如路由器、防火墙等，这些永远不会被修复。这些漏洞会留下长长的尾巴，未来几个月你会看到许多由此引发的黑客事件。

原文 (en)

And the most problematic thing, which I think people don't talk about enough , is all the old internet devices, routers, firewalls, and other old devices that use outdated versions of PHP that will never be fixed. There will be a long trail of these vulnerabilities, and you will see many cases of hacking due to this in the coming months.

Kurtz表示AI使低技能攻击者仅需token成本就能发动国家级攻击，称这是最可怕的趋势。

我们就此撰写了报告，发现许多低技能的敌对团体现在可以发动国家级攻击，实际上只需花费token和查询的成本。这是最可怕的事情。

原文 (en)

We wrote a report on this and see how many different low- skill enemy groups can now conduct state- actor level attacks, effectively for the price of tokens and query . And this is the scariest thing.

George Kurtz 在 CNBC 上警告称，PHP 漏洞将在未来几个月引发大量安全入侵事件。

由于这个 PHP 漏洞，未来几个月将发生许多安全入侵事件。

原文 (en)

many security breaches will occur in the coming months because of the PHP vulnerability.

库尔茨认为放慢AI模型发展无法消除网络安全风险，因为已有许多前沿和开放权重模型可能带来危险。

库尔茨当时说：“精灵已经出了瓶子。外面已经有大量模型，无论是前沿模型还是开放权重模型，都已经可能带来危险。”

原文 (en)

"The genie's out of the bottle," Kurtz said at the time. "There's plenty of models that are already out there, both frontier as well as open-weight models, that can already be dangerous."