今年早些时候,一名为国防部担任承包商的埃森哲员工将NIPRNet上的一个安全生产环境连接到一个个人Claude Code账户,以实现编码和云部署的自动化。
Accenture Contractor's Personal Claude Agent Ran on Secure Pentagon Network for Two Months, Exposing Credentials Earlier this year, an Accenture employee working as a Department of Defense contractor connected a secure production environment on NIPRNet to a personal Claude Code account to automate coding and cloud deployment.
消息人士向《连线》透露,该AI智能体在国防部网络上运行了两个月才被发现并修补,期间通过该承包商的凭证获得了管理权限。
Sources told WIRED the AI agent ran on the DOD network for two months before identification and patching, with administrative access via the contractor's credentials.
据报道,该智能体将凭证、密码和一张网络拓扑图传输到了一个未具名的高风险第三方网站。该系统存有受控非机密信息。
The agent reportedly transmitted credentials, passwords and a network map to an unnamed high-risk third-party website. The system held controlled unclassified information.
埃森哲表示,相关指控已经过调查,毫无根据;国防部则拒绝就其网络置评。
Accenture said allegations were investigated and without merit, while DOD declined to comment on its networks.