Two days ago PHP, this time Brotli: using the same AI tool for attack and defense, how big is the impact of AI on security now! AI has lowered the threshold for finding vulnerabilities, and Bitcoin Core also needs to change its rules! After reading this post and a few recent events, it's quite shocking to see them in connection. one ️⃣ Core developers said on the email list that the large model greatly reduces the threshold for finding vulnerabilities; The new regulations classify vulnerabilities that can be easily rediscovered with simple prompts as "easy to discover" and no longer keep them confidential for a long time. Large versions that are still being maintained should be patched and announced as soon as possible. two ️⃣ OpenAI Red Team discovered a remote code execution vulnerability in Brotli that does not require authentication. The root cause was fixed in February, but no version was released; A new version has been released now. three ️⃣ Many wallets and robot backends in the cryptocurrency industry also rely on Node.js, and the vulnerability of dependency libraries is not far from assets. So how to protect oneself: one ️⃣ From now on, update reminders will be issued for nodes and wallets, and security updates will be prioritized for installation; two ️⃣ Developers check for Brotli dependencies and follow the official security updates; three ️⃣ Wallet and nodes are only downloaded from official channels; four ️⃣ The unreleased version has been fixed and we need to follow up as soon as possible.