字号·· | 护眼
罗塞塔简报

埃森哲承包商将个人Claude智能体接入五角大楼安全网络运行两月,致凭证泄露埃森哲承包商将个人Claude智能体接入五角大楼安全网络运行两月,致凭证泄露

点「原文对照」整页切到原文,或双击某段只看那段的原文。

今年早些时候,一名为国防部担任承包商的埃森哲员工将NIPRNet上的一个安全生产环境连接到一个个人Claude Code账户,以实现编码和云部署的自动化。

Accenture Contractor's Personal Claude Agent Ran on Secure Pentagon Network for Two Months, Exposing Credentials Earlier this year, an Accenture employee working as a Department of Defense contractor connected a secure production environment on NIPRNet to a personal Claude Code account to automate coding and cloud deployment.

消息人士向《连线》透露,该AI智能体在国防部网络上运行了两个月才被发现并修补,期间通过该承包商的凭证获得了管理权限。

Sources told WIRED the AI agent ran on the DOD network for two months before identification and patching, with administrative access via the contractor's credentials.

据报道,该智能体将凭证、密码和一张网络拓扑图传输到了一个未具名的高风险第三方网站。该系统存有受控非机密信息。

The agent reportedly transmitted credentials, passwords and a network map to an unnamed high-risk third-party website. The system held controlled unclassified information.

埃森哲表示,相关指控已经过调查,毫无根据;国防部则拒绝就其网络置评。

Accenture said allegations were investigated and without merit, while DOD declined to comment on its networks.

阅读媒体原文 ↗