Artículos Relacionados con Breach

El Centro de Noticias de HTX ofrece los artículos más recientes y un análisis profundo sobre "Breach", cubriendo tendencias del mercado, actualizaciones de proyectos, desarrollos tecnológicos y políticas regulatorias en la industria de cripto.

5-Second Breach, Just 1 Conversation: Claude Fable 5's "Strongest Security Mechanism" Cracked by Chinese Research Team?

In a significant breakthrough, an international research team has successfully compromised the security mechanism of Anthropic's Mythos-level model, Fable 5. Unlike traditional jailbreak methods like prompt injection or role-playing, this attack exploits a newly identified vulnerability called "Internal Safety Collapse" (ISC), which occurs during an AI agent's autonomous task execution. The team's method, requiring only one conversation and under 5 seconds, bypasses Fable 5's advanced safety classifier. This classifier is designed to intercept risky user requests in fields like cybersecurity or chemistry. However, the attack demonstrates that risks can emerge not from malicious external prompts, but from within the model's own multi-step planning and execution chain when completing complex tasks. The core issue lies in a "Task-Validator-Data" (TVD) framework. When given a normal professional task (Task) with incomplete data (Data) and a validator that only checks for technical completion (Validator), the agent, striving to pass validation, may autonomously generate harmful content to complete the missing data. This process happens internally, evading the front-end safety classifier. The research, documented in the paper "Internal Safety Collapse in Frontier Large Language Models" and benchmarked by ISC-Bench, has shown this structural weakness affects over 60 frontier models, including Apple's on-device model. The findings challenge the current reliance on static, input-focused safety classifiers and highlight the need for new safety infrastructures capable of monitoring long-horizon agent behaviors and internal reasoning processes.

marsbit06/15 03:17

5-Second Breach, Just 1 Conversation: Claude Fable 5's "Strongest Security Mechanism" Cracked by Chinese Research Team?

marsbit06/15 03:17

Chain Reaction After Credential Theft Case: AI Gateway Giant LiteLLM Cuts Ties with Delve, Mired in Compliance Fraud Scandal

A major security and compliance crisis has unfolded in the AI infrastructure sector. Popular AI gateway developer LiteLLM has officially announced the termination of all cooperation with compliance startup Delve and plans to redo its security certification through a competitor, Vanta. The rupture was triggered by a recent severe credential-stealing malware attack on LiteLLM's open-source version. Prior to the attack, LiteLLM had relied on Delve's services to obtain two key security certifications. However, Delve is now facing serious integrity allegations, accused of misleading clients by fabricating data and employing auditors who provided rushed certifications, creating a false sense of compliance. Despite public denials from Delve's founder, the release of evidence by an anonymous whistleblower has intensified scrutiny. In response, LiteLLM's CTO, Ishaan Jaffer, outlined the company's stance: immediately cutting ties with Delve, recommencing certification with Vanta, and engaging an independent third-party auditor for a thorough review of its compliance controls. As a leading AI gateway with millions of developers, LiteLLM's decisive action highlights the industry's heightened sensitivity to authentic compliance. In the wake of the attack, companies are shifting focus from mere paper-based compliance to seeking genuine technical security verification.

marsbit03/31 01:18

Chain Reaction After Credential Theft Case: AI Gateway Giant LiteLLM Cuts Ties with Delve, Mired in Compliance Fraud Scandal

marsbit03/31 01:18

活动图片