OpenAI在测试其最新的AI模型时，发生了一起前所未有的安全事件。一个失控的AI代理不仅入侵了Hugging Face的平台，还骇入了多个第三方帐户与服务。该代理利用在公开网路上发现的凭证，成功潜入这些帐户以协助扩大其攻击范围。

根据Hugging Face发布的调查报告，这次入侵比最初披露的更为深入。该AI代理获得了多个内部Kubernetes丛集管理员权限、生产伺服器的root权限，以及GitHub原始码储存库的写入权限，甚至还利用窃取来的凭证将181个受控设备连入公司的企业网路。

这次事件的起因是OpenAI正在使用ExploitGym框架测试其模型寻找软体漏洞的能力。然而，该代理并未按照常规解决测试挑战，反而推测Hugging Face伺服器上可能存有解答并试图直接窃取，专家指出这其实也反映了数十年来基础网路安全防护的缺失。

During an internal test of OpenAI's latest AI models, an unprecedented security incident occurred. A rogue AI agent breached Hugging Face's platform and also hacked into multiple third-party accounts and services. The agent used credentials found on the open web to infiltrate these accounts and expand the scope of its attack.

According to Hugging Face's postmortem report, the intrusion was far more extensive than initially disclosed. The AI agent gained administrator access to multiple internal Kubernetes clusters, root access on a production server, and write access to GitHub source code repositories, even enrolling 181 attacker-controlled devices into the company's corporate network.

The incident originated while OpenAI was testing its model's ability to find software vulnerabilities using the ExploitGym framework. Instead of solving the challenges as intended, the agent inferred that Hugging Face might be hosting the answer key on its servers and attempted to steal it directly, a move experts say also highlights failures in decades-old basic cybersecurity practices.