{"id":137,"date":"2026-09-30T00:23:46","date_gmt":"2026-09-30T00:23:46","guid":{"rendered":"https:\/\/www.zunliz.com\/index.php\/2026\/09\/30\/hacker-17-tuoi-tao-tro-ly-ai-tham-nhap-nen-tang-cua-microsoft-toan-canh-danh-gia\/"},"modified":"2026-09-30T00:23:46","modified_gmt":"2026-09-30T00:23:46","slug":"hacker-17-tuoi-tao-tro-ly-ai-tham-nhap-nen-tang-cua-microsoft-toan-canh-danh-gia","status":"publish","type":"post","link":"https:\/\/zunliz.com\/index.php\/2026\/09\/30\/hacker-17-tuoi-tao-tro-ly-ai-tham-nhap-nen-tang-cua-microsoft-toan-canh-danh-gia\/","title":{"rendered":"Hacker 17 tu\u1ed5i t\u1ea1o tr\u1ee3 l\u00fd AI th\u00e2m nh\u1eadp n\u1ec1n t\u1ea3ng c\u1ee7a Microsoft &#8211; To\u00e0n c\u1ea3nh &amp; \u0110\u00e1nh gi\u00e1"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">M\u1ed9t hacker 17 tu\u1ed5i v\u1edbi bi\u1ec7t danh &#8220;Faav&#8221; m\u1edbi \u0111\u00e2y \u0111\u00e3 g\u00e2y ch\u1ea5n \u0111\u1ed9ng gi\u1edbi b\u1ea3o m\u1eadt khi ph\u00e1t hi\u1ec7n ra l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng tr\u00ean n\u1ec1n t\u1ea3ng ph\u00e2n t\u00edch n\u1ed9i b\u1ed9 Titan c\u1ee7a Microsoft, ti\u1ebfp c\u1eadn t\u1edbi 17.000 t\u1ef7 d\u00f2ng d\u1eef li\u1ec7u c\u1ee7a c\u00f4ng c\u1ee5 t\u00ecm ki\u1ebfm Bing v\u00e0 th\u00f4ng tin c\u1ee7a 25.000 nh\u00e2n vi\u00ean. \u0110\u00e1ng ch\u00fa \u00fd, chi\u1ebfn t\u00edch n\u00e0y kh\u00f4ng \u0111\u1ebfn t\u1eeb c\u00e1c c\u00f4ng c\u1ee5 qu\u00e9t l\u1ed7i truy\u1ec1n th\u1ed1ng, m\u00e0 \u0111\u01b0\u1ee3c d\u1eabn d\u1eaft b\u1edfi Antares \u2013 m\u1ed9t tr\u1ee3 l\u00fd AI t\u1ef1 ph\u00e1t tri\u1ec3n do ch\u00ednh hacker n\u00e0y l\u1eadp tr\u00ecnh \u0111\u1ec3 t\u1ef1 \u0111\u1ed9ng h\u00f3a quy tr\u00ecnh d\u00f2 qu\u00e9t m\u1ee5c ti\u00eau.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">B\u1ed1i c\u1ea3nh s\u1ef1 ki\u1ec7n v\u00e0 Chi ti\u1ebft k\u1ef9 thu\u1eadt v\u1ec1 chu\u1ed7i khai th\u00e1c c\u1ee7a Faav<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">S\u1ef1 vi\u1ec7c b\u1eaft \u0111\u1ea7u v\u00e0o cu\u1ed1i th\u00e1ng 8, khi tr\u1ee3 l\u00fd AI Antares c\u1ee7a Faav th\u1ef1c hi\u1ec7n qu\u00e9t c\u00e1c d\u1ea3i IP v\u00e0 d\u1ecbch v\u1ee5 thu\u1ed9c s\u1edf h\u1eefu c\u1ee7a Microsoft. Antares \u0111\u00e3 ph\u00e1t hi\u1ec7n ra m\u1ed9t endpoint API thu\u1ed9c d\u1ecbch v\u1ee5 \u0111\u00e1m m\u00e2y Azure li\u00ean k\u1ebft v\u1edbi Titan &#8211; n\u1ec1n t\u1ea3ng ph\u00e2n t\u00edch d\u1eef li\u1ec7u n\u1ed9i b\u1ed9 c\u1ee7a g\u00e3 kh\u1ed5ng l\u1ed3 c\u00f4ng ngh\u1ec7. Chu\u1ed7i l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c khai th\u00e1c c\u1ee5 th\u1ec3 nh\u01b0 sau:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n    <li><strong>B\u1ecf qua ph\u00e2n v\u00f9ng m\u1ea1ng (Network Segmentation Bypass):<\/strong> M\u1eb7c d\u00f9 giao di\u1ec7n ch\u00ednh c\u1ee7a Titan y\u00eau c\u1ea7u k\u1ebft n\u1ed1i m\u1ea1ng n\u1ed9i b\u1ed9 (VPN), m\u1ed9t \u0111\u01b0\u1eddng d\u1eabn ph\u1ee5 c\u00f3 d\u1ea1ng <code>\/v2\/Query<\/code> l\u1ea1i b\u1ecb l\u1ed9 l\u1ecdt ra internet c\u00f4ng c\u1ed9ng m\u00e0 kh\u00f4ng \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh ch\u1eb7n IP nghi\u00eam ng\u1eb7t.<\/li>\n    <li><strong>L\u1ed7 h\u1ed5ng thi\u1ebft k\u1ebf API:<\/strong> Endpoint <code>\/v2\/Query<\/code> n\u00e0y \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 ch\u1ea5p nh\u1eadn c\u00e1c c\u00e2u l\u1ec7nh truy v\u1ea5n SQL tr\u1ef1c ti\u1ebfp t\u1eeb ph\u00eda m\u00e1y kh\u00e1ch (Client-side SQL querying) \u2013 m\u1ed9t m\u00f4 h\u00ecnh thi\u1ebft k\u1ebf c\u1ef1c k\u1ef3 r\u1ee7i ro trong ki\u1ebfn tr\u00fac b\u1ea3o m\u1eadt hi\u1ec7n \u0111\u1ea1i.<\/li>\n    <li><strong>L\u1ed7i x\u00e1c th\u1ef1c JWT nghi\u00eam tr\u1ecdng (Broken Authentication):<\/strong> Ban \u0111\u1ea7u, m\u00e1y ch\u1ee7 t\u1eeb ch\u1ed1i th\u1ef1c thi truy v\u1ea5n do thi\u1ebfu m\u00e3 x\u00e1c th\u1ef1c JSON Web Token (JWT). Tuy nhi\u00ean, khi Faav th\u1eed nghi\u1ec7m g\u1eedi m\u1ed9t chu\u1ed7i JWT gi\u1ea3 m\u1ea1o t\u1ef1 t\u1ea1o v\u1edbi quy\u1ec1n h\u1ea1n &#8220;Administrator&#8221;, h\u1ec7 th\u1ed1ng \u0111\u00e3 ch\u1ea5p nh\u1eadn. C\u01a1 ch\u1ebf ki\u1ec3m tra b\u1ea3o m\u1eadt c\u1ee7a Microsoft t\u1ea1i endpoint n\u00e0y ch\u1ec9 ki\u1ec3m tra s\u1ef1 t\u1ed3n t\u1ea1i c\u1ee7a chu\u1ed7i JWT (ki\u1ec3m tra c\u00fa ph\u00e1p th\u00f4) m\u00e0 ho\u00e0n to\u00e0n b\u1ecf qua b\u01b0\u1edbc x\u00e1c th\u1ef1c ch\u1eef k\u00fd s\u1ed1 (Signature Verification) c\u1ee7a token v\u1edbi b\u1ed9 kh\u00f3a c\u00f4ng khai (Public Keys) c\u1ee7a Azure Active Directory (nay l\u00e0 Microsoft Entra ID).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">H\u1eadu qu\u1ea3 c\u1ee7a chu\u1ed7i sai l\u1ea7m n\u00e0y l\u00e0 Faav \u0111\u00e3 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t ho\u00e0n to\u00e0n c\u01a1 s\u1edf d\u1eef li\u1ec7u Titan, ti\u1ebfp c\u1eadn s\u01a1 \u0111\u1ed3 t\u1ed5 ch\u1ee9c, th\u00f4ng tin nh\u1ea1y c\u1ea3m c\u1ee7a 25.000 nh\u00e2n vi\u00ean v\u00e0 \u0111\u1eb7c bi\u1ec7t l\u00e0 kho l\u01b0u tr\u1eef d\u1eef li\u1ec7u ph\u00e2n t\u00edch kh\u1ed5ng l\u1ed3 c\u1ee7a Bing ch\u1ee9a 17.000 t\u1ef7 d\u00f2ng d\u1eef li\u1ec7u. Sau khi ph\u00e1t hi\u1ec7n, Faav \u0111\u00e3 b\u00e1o c\u00e1o qua ch\u01b0\u01a1ng tr\u00ecnh Bug Bounty c\u1ee7a Microsoft v\u00e0 nh\u1eadn \u0111\u01b0\u1ee3c kho\u1ea3n ti\u1ec1n th\u01b0\u1edfng 5.000 USD v\u00e0o cu\u1ed1i th\u00e1ng 9.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ph\u00e2n t\u00edch \u0111a chi\u1ec1u: S\u1ee9c m\u1ea1nh c\u1ee7a AI-driven Hacking v\u00e0 L\u1ed7 h\u1ed5ng t\u01b0 duy &#8220;Ph\u00f2ng th\u1ee7 th\u1ee5 \u0111\u1ed9ng&#8221;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">S\u1ef1 ki\u1ec7n n\u00e0y l\u00e0 m\u1ed9t case study \u0111i\u1ec3n h\u00ecnh minh h\u1ecda cho s\u1ef1 d\u1ecbch chuy\u1ec3n c\u00e1n c\u00e2n c\u00f4ng ngh\u1ec7 gi\u1eefa phe t\u1ea5n c\u00f4ng (Offensive) v\u00e0 phe ph\u00f2ng th\u1ee7 (Defensive) trong k\u1ef7 nguy\u00ean tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. \u01afu th\u1ebf v\u01b0\u1ee3t tr\u1ed9i c\u1ee7a Tr\u1ee3 l\u00fd AI t\u1ef1 ch\u1ebf (Antares)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c c\u00f4ng c\u1ee5 qu\u00e9t l\u1ed7 h\u1ed5ng truy\u1ec1n th\u1ed1ng (nh\u01b0 Nessus, Acunetix hay Nmap) th\u01b0\u1eddng ho\u1ea1t \u0111\u1ed9ng theo c\u00e1c pattern (m\u1eabu \u0111\u1ecbnh s\u1eb5n) v\u00e0 d\u1ec5 b\u1ecb ch\u1eb7n b\u1edfi t\u01b0\u1eddng l\u1eeda \u1ee9ng d\u1ee5ng web (WAF) do t\u1ea7n su\u1ea5t qu\u00e9t d\u00e0y \u0111\u1eb7c v\u00e0 thi\u1ebfu linh ho\u1ea1t. Ng\u01b0\u1ee3c l\u1ea1i, m\u1ed9t tr\u1ee3 l\u00fd AI nh\u01b0 Antares c\u00f3 kh\u1ea3 n\u0103ng t\u1ef1 \u0111\u1ed9ng h\u00f3a th\u00f4ng minh:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n    <li><strong>Ki\u00ean tr\u00ec v\u00e0 t\u1ed1i \u01b0u h\u00f3a h\u00e0nh vi:<\/strong> Antares \u0111\u00e3 duy tr\u00ec ho\u1ea1t \u0111\u1ed9ng r\u00e0 qu\u00e9t li\u00ean t\u1ee5c trong 10 ng\u00e0y, t\u1ef1 \u0111\u1ed9ng \u0111i\u1ec1u ch\u1ec9nh t\u1ed1c \u0111\u1ed9 v\u00e0 ph\u01b0\u01a1ng th\u1ee9c truy v\u1ea5n \u0111\u1ec3 tr\u00e1nh k\u00edch ho\u1ea1t c\u00e1c h\u1ec7 th\u1ed1ng c\u1ea3nh b\u00e1o t\u1ef1 \u0111\u1ed9ng (IDS\/IPS) c\u1ee7a Microsoft.<\/li>\n    <li><strong>Nh\u1eadn di\u1ec7n ng\u1eef c\u1ea3nh t\u1ed1t h\u01a1n:<\/strong> AI c\u00f3 kh\u1ea3 n\u0103ng li\u00ean k\u1ebft c\u00e1c endpoint ph\u1ee5 (nh\u01b0 <code>\/v2\/Query<\/code>) v\u1edbi c\u00e1c d\u1ecbch v\u1ee5 ch\u00ednh \u0111\u1ec3 t\u00ecm ra logic l\u1ed7i t\u1ed1t h\u01a1n c\u00e1c c\u00f4ng c\u1ee5 qu\u00e9t t\u0129nh ch\u1ec9 d\u1ef1a v\u00e0o ch\u1eef k\u00fd m\u00e3 ngu\u1ed3n (signature-based).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. S\u1ef1 \u0111\u00e1nh \u0111\u1ed5i v\u00e0 R\u1ee7i ro th\u1ef1c t\u1ebf t\u1eeb ph\u00eda Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u1ec1 ph\u00eda Microsoft, l\u1ed7 h\u1ed5ng n\u00e0y ph\u01a1i b\u00e0y m\u1ed9t \u0111i\u1ec3m y\u1ebfu ch\u00ed m\u1ea1ng trong m\u00f4 h\u00ecnh v\u1eadn h\u00e0nh DevSecOps c\u1ee7a c\u00e1c t\u1eadp \u0111o\u00e0n l\u1edbn:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n    <li><strong>S\u1ef1 ch\u1ee7 quan v\u00e0o r\u00e0o d\u1eadu VPN:<\/strong> \u0110\u1ed9i ng\u0169 k\u1ef9 s\u01b0 th\u01b0\u1eddng c\u00f3 xu h\u01b0\u1edbng l\u01a1 l\u00e0 b\u1ea3o m\u1eadt \u1edf c\u00e1c t\u1ea7ng \u1ee9ng d\u1ee5ng s\u00e2u b\u00ean trong (nh\u01b0 x\u00e1c th\u1ef1c API) v\u00ec tin r\u1eb1ng h\u1ec7 th\u1ed1ng \u0111\u00e3 \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 b\u1edfi l\u1edbp m\u1ea1ng VPN n\u1ed9i b\u1ed9. Khi m\u1ed9t endpoint v\u00f4 t\u00ecnh b\u1ecb l\u1ed9 ra ngo\u00e0i, to\u00e0n b\u1ed9 l\u00e2u \u0111\u00e0i c\u00e1t s\u1ebd s\u1ee5p \u0111\u1ed5.<\/li>\n    <li><strong>L\u1ed7i ki\u1ec3m th\u1eed c\u01a1 b\u1ea3n (Testing Oversight):<\/strong> Vi\u1ec7c kh\u00f4ng x\u00e1c th\u1ef1c ch\u1eef k\u00fd JWT l\u00e0 m\u1ed9t l\u1ed7i b\u1ea3o m\u1eadt s\u01a1 \u0111\u1eb3ng (OWASP Top 10 &#8211; Broken Authentication). \u0110i\u1ec1u n\u00e0y cho th\u1ea5y quy tr\u00ecnh ki\u1ec3m th\u1eed t\u1ef1 \u0111\u1ed9ng (CI\/CD pipeline) c\u1ee7a Microsoft \u0111\u00e3 b\u1ecf s\u00f3t c\u00e1c k\u1ecbch b\u1ea3n ki\u1ec3m th\u1eed bi\u00ean (edge cases) \u0111\u1ed1i v\u1edbi c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c token.<\/li>\n    <li><strong>\u0110\u1ecbnh gi\u00e1 Bug Bounty ch\u01b0a t\u01b0\u01a1ng x\u1ee9ng:<\/strong> Kho\u1ea3n th\u01b0\u1edfng 5.000 USD cho m\u1ed9t l\u1ed7 h\u1ed5ng c\u00f3 kh\u1ea3 n\u0103ng ti\u1ebfp c\u1eadn 17.000 t\u1ef7 d\u00f2ng d\u1eef li\u1ec7u c\u1ee7a Bing b\u1ecb c\u1ed9ng \u0111\u1ed3ng b\u1ea3o m\u1eadt \u0111\u00e1nh gi\u00e1 l\u00e0 qu\u00e1 th\u1ea5p, c\u00f3 th\u1ec3 l\u00e0m gi\u1ea3m \u0111\u1ed9ng l\u1ef1c b\u00e1o c\u00e1o b\u1ea3o m\u1eadt c\u00f3 tr\u00e1ch nhi\u1ec7m (Responsible Disclosure) c\u1ee7a c\u00e1c hacker m\u0169 tr\u1eafng tr\u1ebb tu\u1ed5i trong t\u01b0\u01a1ng lai.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">G\u00f3c nh\u00ecn &amp; Khuy\u1ebfn ngh\u1ecb th\u1ef1c chi\u1ebfn t\u1eeb ZunLiz<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">T\u1eeb g\u00f3c \u0111\u1ed9 c\u1ee7a nh\u1eefng ng\u01b0\u1eddi l\u00e0m k\u1ef9 thu\u1eadt, ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m v\u00e0 qu\u1ea3n tr\u1ecb h\u1ec7 th\u1ed1ng, case study c\u1ee7a Faav v\u00e0 Microsoft mang l\u1ea1i nhi\u1ec1u b\u00e0i h\u1ecdc x\u01b0\u01a1ng m\u00e1u m\u00e0 anh em developer c\u1ea7n nghi\u00eam t\u00fac \u00e1p d\u1ee5ng v\u00e0o d\u1ef1 \u00e1n th\u1ef1c t\u1ebf:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. Tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng tin t\u01b0\u1edfng v\u00e0o &#8220;B\u1ea3o m\u1eadt b\u1eb1ng c\u00e1ch che gi\u1ea5u&#8221; (Security through Obscurity)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1eebng bao gi\u1edd ngh\u0129 r\u1eb1ng m\u1ed9t API kh\u00f4ng \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 ho\u1eb7c n\u1eb1m \u1edf \u0111\u01b0\u1eddng d\u1eabn ph\u1ee5 th\u00ec hacker s\u1ebd kh\u00f4ng t\u00ecm ra. V\u1edbi s\u1ef1 tr\u1ee3 gi\u00fap c\u1ee7a AI, vi\u1ec7c d\u00f2 qu\u00e9t to\u00e0n b\u1ed9 c\u1ea5u tr\u00fac th\u01b0 m\u1ee5c v\u00e0 endpoint c\u1ee7a m\u1ed9t h\u1ec7 th\u1ed1ng l\u1edbn ch\u1ec9 c\u00f2n l\u00e0 v\u1ea5n \u0111\u1ec1 th\u1eddi gian. M\u1ecdi API, d\u00f9 l\u00e0 n\u1ed9i b\u1ed9 hay c\u00f4ng khai, \u0111\u1ec1u ph\u1ea3i \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf v\u1edbi gi\u1ea3 \u0111\u1ecbnh r\u1eb1ng n\u00f3 \u0111ang \u0111\u1ed1i m\u1eb7t tr\u1ef1c ti\u1ebfp v\u1edbi internet.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. \u00c1p d\u1ee5ng tri\u1ec7t \u0111\u1ec3 nguy\u00ean t\u1eafc Zero Trust v\u00e0 X\u00e1c th\u1ef1c nghi\u00eam ng\u1eb7t<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n    <li>Lu\u00f4n lu\u00f4n x\u00e1c th\u1ef1c ch\u1eef k\u00fd s\u1ed1 (Signature Verification) c\u1ee7a JWT b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u00e1c th\u01b0 vi\u1ec7n chu\u1ea9n h\u00f3a v\u00e0 \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt th\u01b0\u1eddng xuy\u00ean. Tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng ch\u1ec9 ki\u1ec3m tra s\u1ef1 t\u1ed3n t\u1ea1i c\u1ee7a header ho\u1eb7c payload c\u1ee7a token.<\/li>\n    <li>S\u1eed d\u1ee5ng c\u01a1 ch\u1ebf xoay v\u00f2ng kh\u00f3a (Key Rotation) cho c\u00e1c d\u1ecbch v\u1ee5 x\u00e1c th\u1ef1c nh\u01b0 Azure AD\/Entra ID v\u00e0 \u0111\u1ea3m b\u1ea3o m\u1ecdi m\u00f4i tr\u01b0\u1eddng (Staging, UAT, Production) \u0111\u1ec1u \u00e1p d\u1ee5ng chung m\u1ed9t ti\u00eau chu\u1ea9n b\u1ea3o m\u1eadt nghi\u00eam ng\u1eb7t nh\u01b0 nhau.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. T\u00edch h\u1ee3p AI v\u00e0o quy tr\u00ecnh DevSecOps c\u1ee7a ch\u00ednh b\u1ea1n<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu hacker \u0111\u00e3 b\u1eaft \u0111\u1ea7u d\u00f9ng AI \u0111\u1ec3 t\u1ea5n c\u00f4ng, th\u00ec c\u00e1c k\u1ef9 s\u01b0 h\u1ec7 th\u1ed1ng c\u0169ng ph\u1ea3i d\u00f9ng AI \u0111\u1ec3 ph\u00f2ng th\u1ee7. H\u00e3y t\u00edch h\u1ee3p c\u00e1c c\u00f4ng c\u1ee5 ph\u00e2n t\u00edch m\u00e3 ngu\u1ed3n t\u0129nh (SAST) v\u00e0 \u0111\u1ed9ng (DAST) c\u00f3 h\u1ed7 tr\u1ee3 AI v\u00e0o pipeline CI\/CD \u0111\u1ec3 ph\u00e1t hi\u1ec7n s\u1edbm c\u00e1c l\u1ed7i logic, l\u1ed7i c\u1ea5u h\u00ecnh sai (misconfiguration) tr\u01b0\u1edbc khi code \u0111\u01b0\u1ee3c deploy l\u00ean m\u00f4i tr\u01b0\u1eddng production.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4. Nh\u00ecn nh\u1eadn \u0111\u00fang vai tr\u00f2 c\u1ee7a con ng\u01b0\u1eddi trong k\u1ef7 nguy\u00ean AI<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u01b0 ch\u00ednh Faav \u0111\u00e3 chia s\u1ebb: &#8220;S\u1ef1 ki\u00ean tr\u00ec c\u1ee7a tr\u1ee3 l\u00fd Antares k\u1ebft h\u1ee3p v\u1edbi ph\u00e1n \u0111o\u00e1n tr\u1ef1c gi\u00e1c c\u1ee7a con ng\u01b0\u1eddi \u0111\u00e3 gi\u00fap ph\u00e1t hi\u1ec7n ra l\u1ed7 h\u1ed5ng&#8221;. AI l\u00e0 m\u1ed9t tr\u1ee3 th\u1ee7 \u0111\u1eafc l\u1ef1c gi\u00fap t\u0103ng hi\u1ec7u su\u1ea5t l\u00ean g\u1ea5p h\u00e0ng ch\u1ee5c l\u1ea7n b\u1eb1ng c\u00e1ch t\u1ef1 \u0111\u1ed9ng h\u00f3a c\u00e1c t\u00e1c v\u1ee5 l\u1eb7p \u0111i l\u1eb7p l\u1ea1i (qu\u00e9t m\u1ea1ng, g\u1eedi request th\u1eed nghi\u1ec7m), nh\u01b0ng t\u01b0 duy ph\u1ea3n bi\u1ec7n, kh\u1ea3 n\u0103ng x\u00e2u chu\u1ed7i logic v\u00e0 tr\u1ef1c gi\u00e1c c\u1ee7a ng\u01b0\u1eddi k\u1ef9 s\u01b0 v\u1eabn l\u00e0 y\u1ebfu t\u1ed1 quy\u1ebft \u0111\u1ecbnh \u0111\u1ec3 t\u00ecm ra nh\u1eefng l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt ph\u1ee9c t\u1ea1p nh\u1ea5t.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n<div style=\"margin-top: 24px;padding: 16px 20px;border-left: 4px solid #7c5cfc;border-radius: 0 10px 10px 0;font-size: 0.9rem;color: #94a3b8\">\ud83d\udd17 <strong>Ngu\u1ed3n tin g\u1ed1c &amp; Th\u1ea3o lu\u1eadn:<\/strong> <a href=\"https:\/\/vnexpress.net\/hacker-17-tuoi-tao-tro-ly-ai-tham-nhap-nen-tang-cua-microsoft-5125925.html\" target=\"_blank\" rel=\"nofollow noopener\" style=\"color: #38bdf8;text-decoration: underline\">Hacker 17 tu\u1ed5i t\u1ea1o tr\u1ee3 l\u00fd AI th\u00e2m nh\u1eadp n\u1ec1n t\u1ea3ng c\u1ee7a Microsoft<\/a> (Ghi nh\u1eadn t\u1eeb <em>VnExpress S\u1ed1 H\u00f3a<\/em>).<\/div>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t hacker 17 tu\u1ed5i v\u1edbi bi\u1ec7t danh &#8220;Faav&#8221; m\u1edbi \u0111\u00e2y \u0111\u00e3 g\u00e2y ch\u1ea5n \u0111\u1ed9ng gi\u1edbi b\u1ea3o m\u1eadt khi ph\u00e1t hi\u1ec7n ra l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng tr\u00ean n\u1ec1n t\u1ea3ng ph\u00e2n t\u00edch n\u1ed9i b\u1ed9 Titan c\u1ee7a Microsoft, ti\u1ebfp c\u1eadn t\u1edbi 17.000 t\u1ef7 d\u00f2ng d\u1eef li\u1ec7u c\u1ee7a c\u00f4ng c\u1ee5 t\u00ecm ki\u1ebfm Bing v\u00e0 th\u00f4ng tin c\u1ee7a 25.000 nh\u00e2n [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,6],"tags":[],"class_list":["post-137","post","type-post","status-publish","format-standard","hentry","category-cong-nghe-lap-trinh","category-gaming-thiet-bi"],"_links":{"self":[{"href":"https:\/\/zunliz.com\/index.php\/wp-json\/wp\/v2\/posts\/137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zunliz.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zunliz.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zunliz.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zunliz.com\/index.php\/wp-json\/wp\/v2\/comments?post=137"}],"version-history":[{"count":0,"href":"https:\/\/zunliz.com\/index.php\/wp-json\/wp\/v2\/posts\/137\/revisions"}],"wp:attachment":[{"href":"https:\/\/zunliz.com\/index.php\/wp-json\/wp\/v2\/media?parent=137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zunliz.com\/index.php\/wp-json\/wp\/v2\/categories?post=137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zunliz.com\/index.php\/wp-json\/wp\/v2\/tags?post=137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}