Ema-agent e-AI Angene Kuyo Yonkhe Inethiwekhi Ngetikhatsi Lesingaphansi Kwemahora Lalishumi, Angakaze Asebentise I-Zero-Day

Ngamhla ka-2 Inyoni 2026, i-Unit 42 ye-Palo Alto Networks ishicilele imininingwane yeluphenyo ngekungena ngekhohlisa kunethiwekhi yebhizinisi. Linani lelatfwala umbiko: lohlaselako wacala kusevisi ye-web lefinyelelekako kubo bonkhe bantfu futsi waphetsa anekungena kwelizinga le-root kuyo yonkhe indzawo ngetikhatsi lesingaphansi kwemahora lalishumi, umsebenti lotsatsa licembu lebantfu cishe emaviki lamabili.

Imininingwane lebaluleke kakhulu yileyo lebeyingekho. Kute i-zero-day. Kute emasu langavamile. Lokungena kwasebentisa emasu langetulu kwa-50 lasavele abhalwe kuhlaka lwe-MITRE ATT&CK, lokusho emasu labhaliwe nalashicilelwe labatiwa ngulabavikelako. Loko lokwashintja bekungasiyo indlela, kodvwa bekulijubane. Esikhundleni sekwenta sigaba ngasinye ngesandla, umphatsi waholela ema-agent e-AI labebuka, ahlola, enta futsi ahlela kabusha ngemjikelezo munye longaphatamiseki longazange ume futsi longazange ulale.

Kwenteke ini kulawo mahora lalishumi

Kulandzelana kwetintfo njengobe umbiko ukuchaza:

1. Kungena. Kwangenwa kusevisi ye-web lefinyelelekako kubo bonkhe bantfu, base kwentiwa umhubhe ngekhatsi kunethiwekhi yangekhatsi.
2. Kuhlola. I-agent lesebenta ngekutenta yadvweba libalave lema-microservice angekhatsi ngaphandle kwekubandzakanyeka kwemuntfu.
3. Kuvuna timfihlo. Ema-sub-agent acinga ngekucophelela kuma-repository ekhodi afuna ema-token ekungena nemaphasiwedi emasevisi lebekabhalwe ngco ekhodini.
4. Kukhuphula emandla. Lawo ma-token avula sistimu yekulawula timfihlo, leyaniketa tincwadzimvume temphatsi letinkhulu letiniketa i-root kuyo yonkhe indzawo.
5. Ema-pipeline. Ema-pipeline ekwakha nekufaka adunwa ngetindlela tekusebenta letentelwe khona kuze kwebiwe ema-key ekungena ku-cloud.
6. Kuphendvulela. Lawo ma-key asetjentiswa kuguckula ema-endpoint e-AI enkampani lehlaselwe ngekwayo abe yingcalasizinda yalohlaselako ngemuva kwekungena.

Phindze ufundze lesinyatselo sekugcina. Kubhalisela kwe-AI kwenkampani ngekwayo kwaba lithulusi etandleni talowo lowangena, kusebenta nge-akhawunti yayo nangesikweletu sayo. Loku kuyindlela lensha lekufanele uyengete erejistini yakho yetingoti: yonkhe i-API key yemodeli ye-AI ngesikhatsi sinye iyimphahla yekusebenta futsi iyindzawo yekusebentisa imali.

Linani lelikutsintsako akusiwo emahora lalishumi

Emahora lalishumi linani lelimangalisako, kodvwa livela esehlakalweni sinye. Linani lelifanele ngempela lishintje kuhlela kwakho livela ku-CrowdStrike 2026 Global Threat Report, lelilinganisa sikhatsi se-breakout: sikhatsi lesiphakatsi kwekungena kwekucala kwalohlaselako nesikhatsi lacala ngaso kunyakatela kulamanye emasistimu ngekhatsi kunethiwekhi.

• Sikhatsi lesimaphakatsi se-breakout se-eCrime sehle saba ngemaminitsi lali-29, kukhula kwelijubane nga-65% uma kucatsaniswa nemnyaka lowendlulile.
• Simo lesishesha kakhulu lesake sabhalwa: imizuzwana lengu-27.
• Kukhula nga-89% kwekuhlasela lokutsiwa kwentiwa ngetitsa letisebentisa i-AI.
• 82% wekutfolwa ngo-2025 bekungenayo i-malware, lokusho kutsi lohlaselako ungena ngetincwadzimvume letisemtsetfweni esikhundleni sekufaka i-virus.
• Kukhula nga-266% kwekungena lokuhlose i-cloud lokwentiwa ngulabahlobene nemibuso.

Loko lokushiwo ngemaminitsi lali-29 ekusebenteni: luhlelo lwekuphendvula lolucabanga kutsi umuntfu utawubona sexwayiso ekuseni nekutsi licembu litawuhlangana ngemuva kwesidlo sasemini luhlelo lwesikhatsi lesesaphela. Futsi linani la-82% lisho intfo lebuhlungu kakhulu. I-antivirus yakho ayikubona kuhlasela ngobe kuhlasela akuphatsi lutfo lekungalubona. Kungena ngekhohlisa kwalamuhla akusilo lifayela lelibi lelifikako, kuyi-akhawunti lesemtsetfweni lesetjentiswa kabi.

Kungani kwasebenta: timfihlo letibhalwe ekhodini

Ema-agent awuzange aphule kubetselwa futsi awuzange asungule butsakatsaka. Atfola emaphasiwedi abhalwe lapho emaphasiwedi angakafaneli abe khona, ngekhatsi kwemafayela ephrojekthi. I-token yinye lesemtsetfweni yavula siphatsi setimfihlo, futsi siphatsi setimfihlo savula yonkhe intfo.

Lena akusiyo inkinga lebekelwe emabhizinisi lamakhulu kuphela. Sebentisa loluhlu kumaphrojekthi akho:

• Ema-key esango lekukhokha nobe lesevisi yemiyalezo lahlala efayelini lekuhlela lelagcinwa kanye nekhodi.
• Iphasiwedi ye-database ngekhatsi kwesikripthi lesidzala sekufaka lekute muntfu losivulako.
• Ema-token ekungena esisebenti nobe somtfutfukisi wangaphandle lowahamba umnyaka lowendlulile, lasasebenta.
• I-repository lebeyiyimfihlo yase iba sebaleni ngemuva kwekudluliswa nobe kushintjwa kwe-akhawunti.
• Ikhophi ye-backup yefayela lekuhlela ku-laptop yalotsite.

Umehluko emkhatsini we-agent nalohlaselako longumuntfu lapha akusibo buhlakani, kodvwa kubeketela nemandla ekusebenta. I-agent ifundza yonkhe i-repository, onkhe ma-branch nanobe nguyiphi inguculo lendzala emlandvweni, ayeci lifayela, futsi icedza ngemaminitsi. Nobe nguyiphi imfihlo lowayigcina kanye wase uyisusa ngemuva isaphila emlandvweni we-repository, futsi lowo mlandvo ngiyo kanye indzawo leyifuna kuyo.

Yini lokufanele uyente kulelisonto

Tinyatselo letisihlanu. Sekucala asidzingi sabelomali futsi asidzingi umhlinzeki wangaphandle:

1. Hlola ema-repository akho ufune timfihlo. Emathulusi ekuhlola timfihlo ayatfolakala futsi akhiwe ngekhatsi kumapulatifomu lamakhulu ekhodi. Wasebentise kuyo yonkhe imlandvo, hhayi nje kunguculo yamanje.
2. Yenta kushintja ema-key kube yinkhambo, hhayi sinyatselo selicandza. I-key lengakashintji iminyaka lemibili yi-key leputsukile longakayitfoli. Futsi nawuyishintja ngemuva kwekuputsuka, yishintje kuto tonkhe tindzawo lebeyisetjentiswa kuto, hhayi endzaweni yinye.
3. Lungisa i-playbook yinye yekuhoca. Lesi siphakamiso lesicondzile se-Unit 42: kukhona kwenta kuvimbela lokuhambisanako lokuhoca ndzawonye tincwadzimvume, ema-session e-OAuth, ema-pipeline e-CI/CD nema-akhawunti e-cloud. Uma uhoca ingcenye kuphela, unika lohlaselako sikhatsi sekuphindze angene ngalenye ingcenye.
4. Lawula i-AI njengengcalasizinda lesisekelo. Gcina luhlu lwayo yonkhe imodeli nayo yonkhe i-key lesetjentiswako, beka imikhawulo yemazinga ekucela, sebentisa emalungelo lamancane kakhulu, futsi uvule kubhalwa kwekuhlola. Umbiko ukuncoma loku ngalokucacile, futsi yiko lokuguckula lesehlakalo lesingenhla sisuke kube yinhlekelele lethulile sibe sexwayiso lesisheshako.
5. Funa kubuyeketwa kwekhodi ngebantfu labanyenti nekuvikelwa kwema-branch. Ikakhulukati kuma-repository e-infrastructure-as-code, ngobe lowo ngumnyango lapho kushintja kwelayini yinye kufaka khona umnyango wangemuva. Kanye naloko, buka kutiphatsa esikhundleni setimphawu: kucela kwe-API lokukhulu ngekushesha nekushintja kwesimo ngekushesha kuyimiphawu yeminwe ye-agent lesebenta ngekutenta.

Esimeni sase-Saudi, letinyatselo akusito tindlela letinhle tekutikhetsela. Ema-Essential Cybersecurity Controls e-Sikhungo Savelonkhe Sekuvikeleka Kwe-cyber (NCA) afaka tigaba letichazwe ngalokucacile tekulawula bunikati nekungena kanye nekuvikeleka kwetinguko nekutfutfukisa, futsi umtfwalo wekuvikela idatha yemuntfu uba senhlanganweni ngaphansi kweMtsetfo Wekuvikela Idatha Yemuntfu (PDPL). Kungena ngekhohlisa lokwacala nge-key lebhalwe ekhodini yemtfombo akunciphisi lutfo kulowo mtfwalo.

Umbono we-Origami

Silufundza lesehlakalo njengekuphela kwembono munye: wekutsi kuvikeleka kuyicoca lemathulusi lowatsengako. Lohlaselako lapha akazange abhekane ne-firewall futsi akazange adlule nge-antivirus, ngobe kute kulokubili lebekumvimbile endleleni. Wangena nge-key lesemtsetfweni layitfola ibhaliwe, futsi wenta ngemalungelo lebekaniketwe ngempela. Kute umkhicito lowutsengako lolungisa loku. Lokukulungisako kutiphatsa lokuhle endleleni ikhodi lebhalwa ngayo, timfihlo letigcinwa ngayo, nemalungelo laniketwa futsi ahocwe ngayo.

Indlela lesiyibona kaninginingi kumakhasimende: timfihlo letiyingoti kakhulu kuyacandza kutsi tibe kusistimu lenkhulu. Tiba kumaphrojekthi laseceleni, sikripthi sekudlulisa idatha lesabhalwa kanye, i-dashboard yangekhatsi yemibiko leyakhiwa ngumkhontileka, kuhlanganiswa kwesikhashana nemhlinzeki lokusebente iminyaka lemibili. Loku akukaze kungene ekubuyeketweni kwekuvikeleka ngobe kute muntfu lokubala njengesistimu. Lohlaselako akawenti lowo mehluko. Nasibuyeketa indzawo yelikhasimende sicala khona lapha: aphi ema-key, ngubani lonelilungelo lelitsite, futsi kwentekani uma i-key yinye iputsuka lamuhla ebusuku. Uma ufuna kubuyeketwa ngalombono, utasitfola ekhasini lekuchumana.

Sigcino

Indlela yekuhlasela ayizange ishintje. Lijubane layo lishintjile. Emasu langetulu kwa-50 latiwako asebenta ngetikhatsi lesingaphansi kwemahora lalishumi ngobe ema-agent lasebenta ngekutenta awasebentisa ngaphandle kwekuphumula, futsi sikhatsi lesimaphakatsi se-breakout ngekhatsi kunethiwekhi manje singemaminitsi lali-29. Kuvikela lokutsembele ekutseni umuntfu atawubona ngesikhatsi akusenele. Cala ngembuto lolula kakhulu nalolukhuni kakhulu: uyati yini kutsi ema-key akho akuphi njenga nyalo, nekutsi ngubani longawafundza?

Imitfombo

• Unit 42 — An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation, Palo Alto Networks, 2 Inyoni 2026: sikhatsi sekungena ngekhohlisa, luchungechunge lwekuhlasela, linani lemasu e-MITRE ATT&CK, netincomo tekuvikela.
• CrowdStrike 2026 Global Threat Report: sikhatsi se-breakout semaminitsi lali-29 nelirekhodi lemizuzwana lengu-27, kukhula nga-89% kwekuhlasela kwetitsa letisebentisa i-AI, nelinani la-82% lekutfolwa lokungenayo i-malware.
• Check Point AI Security Report 2026: i-AI isuka ekubeni ngumsiti iba ngumsebentisi ngekhatsi kwekungena lokwentekako ngempela.
• Sikhungo Savelonkhe Sekuvikeleka Kwe-cyber (NCA) — Essential Cybersecurity Controls, kanye ne-Sikhungo Sase-Saudi Sedatha Nebunhloli Lobentiwe (SDAIA) — Umtsetfo Wekuvikela Idatha Yemuntfu (PDPL).