Chii chaitika
Cloud Security Alliance yakaburitsa chinyorwa chekutsvagisa muna Nyamavhuvhu 6, 2026 ichitsanangura CoreBreak, seti yeCVE ina mhiri kweAWS, Google, uye Vercel mumiriri magadzirirwo umo iyo-yekutumira-yekutumira layer yakaita nharembozha pasina kuratidza kuti yakagadzira mutauro. Vese vana vane zvigadziriso zvevatengesi.
Iyo Cloud Security Alliance's AI Safety Initiative yakaburitsa chinyorwa chekutsvagisa muna Nyamavhuvhu 6, 2026 ichitsanangura muchinjika-chikuva panjodzi pateni yakanzi CoreBreak. Sekureva kwechinyorwa ichi, vaongorori vezvekuchengetedza Hedi Ingber naAviyam Ivgi, mubatanidzwa wekambani yekuchengetedza Stealth, vakaratidza zvakawanikwa kuBlack Hat USA 2026 zvichiratidza kuti maturusi-ekuita maturusi eAmazon Bedrock AgentCore, Google's Agent Development Kit (ADKU3) uye kugovera ZXQAX Vercel's AI SDK imwe neimwe inogona kukweverwa kuti imhanye chishandiso pasina chepamutemo modhi inotendeuka inoitika. Nekuti modhi yemutauro haina kumbobvira yakumbirwa, chinyorwa chinopokana, magadhi akavakirwa akatenderedza modhi haana sarudzo yekupindira.
Zvirongwa zveagent zverudzi urwu zvinogovana chimiro chakafanana. Iyo orchestration layer inounganidza chikumbiro chemushandisi, sisitimu yekumhanyisa, nhoroondo yekukurukurirana, uye katalog yezvishandiso zviripo, inotumira kune yemhando yemutauro, uye inomirira kuti modhi idzose murairo wakarongeka unoreva chishandiso nenharo dzayo. Iyo SDK inozotumira iyo inoenderana basa, script, kana API kufona uye inodyisa mhedzisiro kumashure muhurukuro. CoreBreak inonangidzira danho rekupedzisira: zvinoenderana netsamba, iyo yekutumira pfungwa mune chimwe nechimwe chezvitatu zvigadzirwa zvakabatwa data yaingofanana neyakagadzirwa-yakagadzirwa chishandiso kufona semvumo, pasina kutarisa kwayakabva.
Chinyorwa chinonyora mana CVE zviziviso zvine akasiyana nzira dzekubira, ichidudza vatengesi bulletins uye National Vulnerability Database zvinyorwa. AWS yakapa CVE-2026-18830 (CVSS v4.0 8.6, High) kuBedrock AgentCore harness flaw, uko munhu anofona ari kure anogona kuisa mudziyo wekushandisa-chishandiso zvakananga mumeseji yekupedzisira yechikumbiro cheInvokeHarness API. Google yakapa CVE-2026-18236 (9.3, Critical) kune chikanganiso cheADK umo munhu anorwisa achikwanisa kupinza zviitiko munhoroondo yechikamu anogona kugadzira simbiso yemvumo yemunhu, nekuti processor yekusimbisa haina kutarisa kuti chishandiso chaive cheanouraya, kuti chaitoda chisimbiso chezita uye kuwirirana kwekutanga. Vercel's @ai-sdk/harness-codex uye @ai-sdk/harness-opencode yakagamuchira CVE-2026-64650 uye CVE-2026-64651 (6.3, Medium imwe neimwe), apo kodhi ine hutsinye yatove ichimhanya mukati mebhokisi rejecha reLinux rinogona kugutsa mutsara werubatsiro rwakatenderwa nzira yerubatsiro. script.
Magadziriso aripo, asi mutoro unosiyana nedeployment model. Chinyorwa chinoti AWS gadziriso kuBedrock AgentCore InvokeHarness API inofambiswa otomatiki pamberi paChikunguru 31, 2026 uye haidi chiito chemutengi, kunyangwe ichiri kupa zano rekusimbisa kuvharwa kwedunhu rakapihwa uye kumisikidzwa. Google inogadzirisa yakatumirwa muADK yePython vhezheni 2.5.0 musi waChikunguru 16, 2026, uye Vercel zvigadziriso zvakatumirwa mu harness-codex 1.0.29 uye harness-opencode 1.0.28 2. Manoti anodhiza CoreBreak seyakasiyana nejekiseni rekukurumidza: jekiseni rekukurumidza rinoedza kushandura mutongo wemodhi, nepo CoreBreak ichipfuura nemubvunzo wekuti modhi yakashandisa mutongo zvachose.
Kwakabva mashoko: labs.cloudsecurityalliance.org ↗
Nei zvichikosha
Masefa emukati, masisitimu anokurudzira, kuramba kudzidziswa, uye magedhi emvumo yemunhu zvese zvinofungidzira kuti modhi ndiyo bato rinosarudza kana chishandiso chinoshanda. Kana iyo dispatch layer ikagamuchira chero chakaumbwa senge yemhando yekufona kwechishandiso, izvo zvinodzora zvinopfuudzwa pane kukundwa - uye matanda ekutarisa zvikwata zvinowanzo ongorora haambogadzirwa.
Mazhinji bhizinesi anodzora eagetic AI anogara kana kutenderedza modhi. Sisitimu inosimudzira kudzora zviito zvinonzwisa tsitsi, mafirita emukati mameseji ekupinda uye zvinobuda, kuramba kudzidziswa kunobikwa mumhando uremu, uye nhanho-yekusimbisa nhanho dzegedhi renjodzi huru maturusi. Imwe neimwe yeaya masimba anofungidzira kuti modhi ndiro bato rinosarudza kana chishandiso chinoshanda. Kana dhizaini yekutumira ichaita chero mubhadharo wakanyatso kuumbwa, iwo mainvestimenti anopa diki dziviriro yekudzivirira - kwete nekuti iwo akange asina kugadzirwa zvakanaka, asi nekuti nzira dzekurwisa dzakatenderedza nzvimbo yavanoshanda. Iro iboka rakasiyana redambudziko kubva kune gadhirail rinogona kupokana kare.
Iwo chaiwo masimba kuseri kweaya madhiri ekutumira ndiwo anopa huremu hwekutsvaga. Chinyorwa chinoti Vercel zvikanganiso zvinogona kusvika kune maturusi-akafumurwa maturusi anosanganisira akavanzika ekutarisa, kuendesa mashandiro, uye Cloud API mafoni. Iyo Google chikanganiso chakanyanya kutaurwa: yakabvumira zvisimbiso zvekunyepedzera kuti zvisvike maturusi akaiswa nemaune kuseri kwemvumo yemunhu, inova masangano ekutonga anochengeterwa zviito zvinoonekwa zvakanyanyokoshesesa kuita otomatiki. Nzira yekunzvenga iyo inonyatso kudzikamisa nhanho yemunhu-in-the-loop inodzikisira kudzikisira kunodudzwa nezvikwata zvakawanda kana zvichipembedza kuzvitonga kwemumiririri.
Iyo chigamba nyaya inoratidzawo asymmetry inozodzoka sezvo mumiriri wekushandisa achipararira. Vatengi veiyo AWS inokwenenzverwa zvizere sevhisi yakagadziridzwa pasina kuita chero chinhu. Matimu anomhanyisa Google's ADK kana Vercel's harness mapakeji munzvimbo dzawo anofanirwa kuona kuraira, kugadzirisa kutsamira, uye kuendesazve - uye kutsamira kunogadziridza mumapaki ekugadzira anogara achinonoka nemavhiki kana mwedzi. Iyo imwechete yepasi pedhizaini gaka saka ine rakasiyana chaizvo rinoshanda kuratidzwa hwindo zvichienderana nekuti sangano rinoshandisa zvivakwa zveagent sesevhisi kana vatengesi vayo mucodebase yayo.
Panewo gap rekuona. Chinyorwa chinocherekedza kuti kutariswa kwekuchengetedza kweagentic masisitimu kwagara kwakanangana nemhando yekumisikidza uye zvinobuda - kukurudzira kutema matanda, mureza kupedzwa kwekufungidzira, kuongorora maturusi akasarudzwa nemuenzaniso. Kana chishandiso chikaita pasina modhi iri kushanda, hapana chimwe chezvigadziriso zviripo kuti zvipinzwe. Zvinhu zvakati wandei zvakakosha zvinoramba zvisingazivikanwe: chinyorwa chinoshuma hapana humbowo hwekubiridzira musango, hachipi fungidziro yekuti mangani akatumirwa akabatwa, uye haatsanangure humbowo-hwe-pfungwa kodhi. CSA iri pachena kuti kuburitswa kuviri kune vatengesi vana hakuratidzi chimiro cheindasitiri, uye kuti iyo yakacherechedzwa kuomarara inzvimbo imwe chete yedata kwete mutemo wekupihwa zvibodzwa.
Interactive Mechanism: Iyo Inonyatsoshanda
Ongorora ari pasi tekinoroji kuseri kwekusimudzira uku uchipindirana.
crm_get_transaction(id='4092').What most distinguishes an AI agent from a basic chatbot?
Zvekutarisa zvinotevera
Kunyangwe ivo vanozvimiririra vanoshanda vanonyatso shandisa iyo Google uye Vercel mapakeji ekugadziridza, ingave yakafanana mapfumo gap ari pamusoro mune mamwe maajenti masisitimu, kungave kune-mu-musango kubiridzira kunoshumwa, uye kana vatengesi vanoenda kunosainwa, sesheni-yakasungwa mvumo tokeni yekushandisa chishandiso.
Mubvunzo wekongiri wepedyo-wenguva ndeyekutora chigamba. AWS's inogadziriswa gadziriso inotsanangurwa seyakatoiswa kare, asi ADK 2.5.0 uye maviri Vercel harness inoburitsa chete inobatsira vashandisi vanoaisa. Tarisa masaini ari pasi - pasuru registry yekugamuchira mitengo, maforogo anotengesa asingambodhonze iyo, uye yemukati yepuratifomu mifananidzo inopinza shanduro dzekare. Chinyorwa chinokurudzirawo cheki chekudzoka: kuongorora matanda ezvikumbiro zvechishandiso izvo zvisingakwanisi kusungirirwa kune inoenderana, yakanyatso kuumbwa modhi yekupedzisa mune rekodhi rekodhi. Kunyangwe masangano ane dispatch-layer telemetry yekumhanyisa cheki iyoyo pachayo haina kugadziriswa.
Mubvunzo wechipiri ndewe scope. CoreBreak inovhara zvigadzirwa zvitatu, asi iyo yakatsanangurwa pateni - kuvimba nechimiro chemubhadharo kana mutsara wekuraira sehumbowo hwemvumo yemuenzaniso - haina kujeka kwavari. Chero chimiro chine yakafanana SDK-kune-modhi-kune-chishandiso chimiro chinogona kutakura gaka rakafanana. Tarisa uone mamwe mazano kubva kune vamwe vamiririri vanochengetedza, uye kuti vatsvakurudzi vakashambadza zvizere ruzivo rwehunyanzvi mushure mekuratidzwa kweBlack Hat. Dzimwe nyaya dzakasimbiswa dzinosimbisa gakava reCSA rekuti iyi pateni yemaitiro kwete matatu masanganeno tsikidzi.
Chechitatu, tarisa mhinduro yezvivakwa. Kurudziro yeCSA ndeyekuda humbowo hwekrisptographic yekuti kufona kwechishandiso kwakabva kumhando chaiyo yekupedzisa - yakasainwa, yakasungwa-yakasungwa, imwe-nguva tokeni - pane kupa mvumo kubva kune meseji chimiro kana chitupa chekuzivikanwa. Kunyangwe vatengesi vakuru vanotora iyo modhi, uye ingave chimwe chinhu chinogona kukumbirwa nevatengi uye kuona panguva yekutenga, ichaona kana kuburitswa uku kuchichinja magadzirirwo kana kungoburitsa zvigamba. Confirmation-processing logic inosimbisa muridzi wechombo, chinodiwa chesimbiso, uye gakava rechokwadi uchipokana nechakarekodhwa runhare ndiyo vhezheni yakamanikana yekugadzirisa kumwe chete.
Chekupedzisira, tarisa hutongi uye kutyisidzira-hungwaru mateki. CSA inonongedza kune yayo MAESTRO kutyisidzira-modhiyo chimiro uye AI Controls Matrix v1.1 senzvimbo uko kuuraya-kutonga uye rombo-manejimendi kuongororwa kunofanirwa zvino kuvharidzira zvakajeka kutumira chishandiso, uye inobatanidza CoreBreak kune yayo yekutanga GuardFall tsvakiridzo pane shell-level guardrail bypasses. Zvakare zvakakosha kutariswa: ingave zvinyorwa zveNVD kana zvibodzwa zveCVSS zvakadzokororwa, vangave vatengesi vakaburitsa ruzivo rwepashure-chiitiko kupfuura mabulletin ekutanga, uye kana kupi zvako kwakasimbiswa kubiridzira kunobuda. Hapana kana maCVE mana parizvino ane chirevo cheveruzhinji chekushungurudzwa-mu-musango mune zvinyorwa zveCSA, uye kusavapo kwemishumo yakadai hakuna kufanana nekusaita chiitiko.