**北京时间 2023 年 3 月 8 日，据国外科技媒体 404Media报道，安全网络专家 MrBruh 意外发现快餐连锁店肯德基（KFC）所用 AI 招聘系统存在漏洞，不仅可以窃取求职者的信息，而且还能掌握该 AI 系统，雇用或拒绝快餐店应聘者。**
**肯德基招聘 AI 系统漏洞详情**
据 MrBruh 介绍，肯德基招聘 AI 系统的漏洞主要在于其身份验证机制薄弱。该系统使用简单的用户名和密码进行身份验证，这使得黑客很容易通过暴力破解或网络钓鱼等手段获取系统访问权限。一旦黑客获得了系统访问权限，他们就可以窃取求职者的个人信息，包括姓名、联系方式、教育背景和工作经历等。此外，黑客还可以操纵该 AI 系统，雇用或拒绝快餐店应聘者。
**肯德基回应招聘 AI 系统漏洞**
肯德基在得知招聘 AI 系统存在漏洞后，立即采取了措施修复漏洞。该公司表示，已经对系统进行了升级，并加强了身份验证机制。此外，该公司还表示将对受影响的求职者进行赔偿。
**招聘 AI 系统漏洞引发担忧**
肯德基招聘 AI 系统漏洞的曝光引发了人们对招聘 AI 系统安全性的担忧。一些专家认为，招聘 AI 系统存在着固有的安全风险，因为这些系统依赖于大量的数据来做出决策。如果这些数据被黑客窃取或篡改，可能会导致招聘 AI 系统做出错误的决策，从而损害求职者的利益。
**专家建议招聘 AI 系统用户加强安全防护**
为了防止招聘 AI 系统被黑客攻击，专家建议招聘 AI 系统用户采取以下措施加强安全防护：
* 使用强密码并定期更改密码。
* 启用双因素认证。
* 定期对系统进行安全扫描，以发现潜在的漏洞。
* 对系统中的数据进行加密。
* 对受影响的求职者进行赔偿。
**肯德基招聘 AI 系统漏洞事件给招聘 AI 系统行业敲响了警钟。招聘 AI 系统用户应加强安全防护，以防止黑客攻击。**
英语如下：
Headline: KFC’s AI Hiring System Found Vulnerable, Exposing Job Applicants’Information
Keywords: Hiring System, Information Security, Artificial Intelligence
Article Content:
## KFC’s AI Hiring System Reportedly Has a Vulnerability, Allowing Accessto Hire or Reject Candidates
**March 8, 2023, Beijing – According to a report from 404Media, a cybersecurity expert known as MrBruh discovered a vulnerability in the AI hiring system used by fast-food chain KFC. The vulnerability not only allowed access to job applicants’ informationbut also gave control over the AI system, enabling the hiring or rejection of job candidates at the fast-food restaurants.**
**Details of KFC’s AI Hiring System Vulnerability**
MrBruh explained that the vulnerability in KFC’s AI hiring system primarily lies in its weak authentication mechanism. The system used a simple username and password for authentication, making it easy for attackers to gain access through brute force attacks or phishing attempts. Once attackers gained access to the system, they could steal personal information of job applicants, including names, contact information, educational background, and work experience. Furthermore, attackers could manipulate the AI system to hire or reject jobcandidates at the fast-food restaurants.
**KFC’s Response to the AI Hiring System Vulnerability**
Upon learning about the vulnerability in its AI hiring system, KFC immediately took steps to fix the issue. The company stated that it had upgraded the system and strengthened the authentication mechanism. Additionally, the company announced that it would compensate affected job applicants.
**KFC’s AI Hiring System Vulnerability Raises Concerns**
The revelation of the vulnerability in KFC’s AI hiring system has raised concerns about the security of AI systems used in the hiring process. Some experts believe that AI hiring systems pose inherent security risks since they rely on vast amounts of data to make decisions. If this data is stolen or manipulated by attackers, it could lead to AI hiring systems making erroneous decisions, potentially harming job seekers’ interests.
**Experts Advise AI Hiring System Users to Enhance Security Measures**
To prevent AI hiring systems from being compromised by attackers, experts recommend that AI hiring system users take the following measures to enhance security:
* Use strong passwords and change them regularly.
* Enable two-factor authentication.
* Regularly conduct security scans of the system to identify potential vulnerabilities.
* Encrypt data stored in the system.
* Compensate affected job applicants.
**The incident involvingthe vulnerability in KFC’s AI hiring system serves as a wake-up call for the AI hiring system industry. AI hiring system users should strengthen their security measures to prevent cyberattacks.**
【来源】https://www.ithome.com/0/744/789.htm
Views: 1