一名埃森哲承包商将一个敏感的五角大楼系统连接到了其个人的 Claude Code 账户。据 Vittoria Elliott 10 月 29 日周四在《连线》杂志报道，引述消息人士称，该 AI 代理随即在国防部网络上运行了两个月。报道称，该代理似乎已将凭证和网络拓扑图发送到了一个高风险网站。埃森哲否认有任何不当行为。TNW 尚未独立核实该报道。
An Accenture contractor connected a sensitive Pentagon system to their personal Claude Code account. The AI agent then ran on a Defense Department network for two months, Vittoria Elliott reported for WIRED on Thursday 29 October, citing sources. The agent appears to have sent credentials and a network map to a high-risk website, the report says. Accenture denied wrongdoing. TNW has not independently verified the report.
“这些指控经过了彻底且独立的调查，结论是毫无根据。我们完全遵守了法律和合同义务，”一名埃森哲发言人告诉《连线》。
“These allegations were thoroughly and independently investigated and found to be without merit. We fully complied with our legal and contractual obligations,” an Accenture spokesperson told WIRED.
《连线》报道称，埃森哲未说明是谁进行的调查。国防部告诉《连线》，不予置评其网络或系统的状态。
Accenture did not say who carried out the investigation, WIRED reported. The Defense Department told WIRED that it does not comment on the status of its networks or systems.
代理的行为 该系统存放受控非密信息（CUI），即发布前需经过审查的敏感数据。多个情报机构使用该系统。它运行在 NIPRNet 上，即五角大楼用于非密信息的网络。NIPRNet 连接互联网，但有严密的安全防护。
What the agent did The system holds controlled unclassified information (CUI), which is sensitive data that needs review before any release. Several intelligence agencies use it. It runs on NIPRNet, the Pentagon’s network for unclassified information. NIPRNet connects to the internet but has heavy security.
一名消息人士告诉《连线》，该承包商将自己的凭证提供给 Claude 代理，以便其编写代码和设置云服务器。这使该代理获得了管理员访问权限，并得以绕过常规控制。该代理编写代码并将其保存到承包商的系统中。
The contractor gave the Claude agent their credentials so it could write code and set up cloud servers, a source told WIRED. That gave the agent administrative access and let it get around the normal controls. The agent wrote code and saved it into the system for the contractor.
它还必须访问互联网以完成任务。在此过程中，它似乎将凭证、密码和网络拓扑图发送给了一个第三方网站。《连线》未透露该网站名称。据《连线》报道，美国国家标准与技术研究院已将该网站标记为高风险。该网站存在的一个缺陷可能让黑客诱导 AI 编码代理窃取凭证。
It also had to reach the internet to do its tasks. In doing so, it appears to have sent the credentials, passwords and a network map to a third-party website. WIRED did not name the site. The US National Institute of Standards and Technology has flagged that site as high risk, WIRED reported. A flaw there could let hackers steer an AI coding agent into stealing credentials.
“这百分之百是国家安全威胁，并可能造成不可挽回的损害，”一名知情人士告诉《连线》。未上报的违规事件国防部员工和联邦承包商必须在 72 小时内上报网络安全事件。据《连线》消息人士透露，埃森哲根本没有首先向政府上报此事。其员工并未将其视为紧急事件。在国防部将 Anthropic 列为供应链风险后，五角大楼员工目前可能无法使用 Claude。
“It’s 100 percent a national security threat and could cause irreparable harm,” a source aware of the incident told WIRED. A breach that was not reported Defense Department staff and federal contractors must report cybersecurity incidents within 72 hours. Accenture did not first report this one to the government at all, WIRED’s sources said. Its staff did not treat it as urgent. Pentagon staff currently may not use Claude, after the department labelled Anthropic a supply chain risk.
Anthropic 将《连线》引向其使用政策，该政策禁止未经授权使用其产品绕过安全控制。
Anthropic pointed WIRED to its usage policy, which bars using its products to get around security controls without authorisation.
《连线》报道称，没有迹象表明黑客进入了机密系统。但前美国国家安全局黑客、现 IANS 讲师 Jake Williams 表示，团队通常会在 NIPRNet 上测试代码，然后再将其转移到机密网络。
There is no sign that hackers reached a classified system, WIRED reported. But teams often test code on NIPRNet before it moves to classified networks, said Jake Williams. He is a former NSA hacker who teaches at IANS.
Williams 告诉《连线》：“代码在 NIPR 上可能完全正常运行，但在 SIPR 网络上却做一些恶意且未披露的事情，这 100% 是可能的。”“我们以前没见过这种情况”《连线》编辑于 10 月 30 日周五在其 Uncanny Valley 播客节目中讨论了这一独家报道。《连线》政治与科学总监 Leah Feiger 表示，该事件属于首例。Feiger 说：“我们以前没见过这种情况。”
“The code could operate completely normally in NIPR and do something malicious and undisclosed in a SIPR network, that is 100 percent possible,” Williams told WIRED. ‘We have not seen this before’WIRED’s editors discussed the scoop on its Uncanny Valley podcast on Friday 30 October. Leah Feiger, WIRED’s director of politics and science, said the incident was new. “We have not seen this before,” Feiger said.
撰稿编辑 Zoë Schiffer 指出，没有迹象表明存在黑客攻击企图。她说，该承包商试图使用 Claude 编写和部署代码。
Contributing editor Zoë Schiffer noted that there is no sign of a hacking attempt. The contractor was trying to use Claude to write and deploy code, she said.
Schiffer 说：“我们不知道是否发生了任何邪恶活动。”
“We don’t know that anything nefarious was going on,” Schiffer said.
执行编辑 Brian Barrett 称其为“不可原谅”，并表示他假定这不会是同类事件的最后一例。
Executive editor Brian Barrett called it “inexcusable”, and said he assumed it would not be the last case of its kind.
据《连线》报道，埃森哲持有超过 35 亿美元的联邦合同，其中近 6.05 亿美元与五角大楼签订。本月早些时候，因未修补的系统导致违规，联邦调查局清除了一名埃森哲承包商。《404 Media》于 10 月报道称，埃森哲还将员工的 Claude 支出上限设为每月 29 美元。
Accenture holds more than $3.5bn in federal contracts, nearly $605m of them with the Pentagon, according to WIRED. Earlier this month, the FBI removed an Accenture contractor after an unpatched system led to a breach. Accenture also caps staff Claude spending at $29 a month, 404 Media reported in October.