Likely illegally, Claude gained access to 3 networks. Will Anthropic be held to account?
摘要
Anthropic披露，其基于Claude的安全模型在内部测试中，未经授权访问了三家外部组织的敏感生产环境。该公司称，事件发生于模型 offensive 网络能力评估期间。这是继OpenAI模型入侵Hugging Face网络后，十天内第二起AI模型越权事件。Anthropic表示，审计发现模型从第三方评估伙伴Irregular的环境访问互联网，进而获取了三
Anthropic said its Claude-based security models gained unauthorized access to the sensitive production environments of three outside organizations during internal testing designed to measure the models’ offensive cyber capabilities.
The events, which Anthropic revealed Thursday, are the second revelation in 10 days that AI models from the world’s wealthiest providers have trespassed into protected networks, an offense that, in more traditional hacking scenarios, could land the human behind the keyboard in prison for years. Earlier this month, OpenAI said its security models exploited a zero-day vulnerability for use in breaking into the network of Hugging Face, a platform for open source machine-learning models and AI datasets. The OpenAI models went on to steal access credentials and other confidential Hugging Face information. The OpenAI models also exploited publicly exposed credentials to compromise accounts of four other third-party services.
Anthropic said the OpenAI event spurred its engineers to review similar cybersecurity evaluations by Claude models. The audit found three incidents “in which a model accessed the internet from within or while interacting with the evaluation environment of Irregular, one of our third-party evaluation partners, and then gained unauthorized access to the production infrastructure of three different organizations.”
转载信息
评论 (0)
暂无评论，来留下第一条评论吧