{"@context":"https://schema.org","@type":"NewsArticle","generatedAt":"2026-08-11T09:21:12.743Z","headline":"OpenAI 披露第三方网络安全评估事故：测试环境配置错误致模型访问公网","description":"OpenAI 发文披露其外部网络安全测试伙伴 Irregular 在运行 CTF 式评估时，因测试环境配置错误使模型得以访问公网。一次测试中，虚构目标名称与真实域名重合，模型误将真实网站当作模拟环境的一部分加以利用。Anthropic 的报告中亦提及 Irregular，其托管的错误配置评估环境曾让 Claude 在部分测试中获取实时互联网访问权限。","url":"https://www.aioga.com/news/cmsgqvl1h0dwsro5qu69r1g0b/","mainEntityOfPage":"https://www.aioga.com/news/cmsgqvl1h0dwsro5qu69r1g0b/","datePublished":"2026-08-05T23:45:32.000Z","dateModified":"2026-08-05T23:45:32.000Z","inLanguage":"zh-CN","publisher":{"@type":"NewsMediaOrganization","name":"Aioga","url":"https://www.aioga.com"},"citation":["https://simonwillison.net/2026/Aug/5/third-party-cyber-evaluations","https://aihot.virxact.com/items/cmsgqvl1h0dwsro5qu69r1g0b"],"canonicalUrl":"https://www.aioga.com/news/cmsgqvl1h0dwsro5qu69r1g0b/","directAnswer":{"@type":"Answer","text":"OpenAI披露，一家外部网络安全测试伙伴在运行原拟隔离的CTF式评估时发生环境配置错误，使模型获得公网访问权限，并误将真实网站当作模拟目标加以利用。","url":"https://www.aioga.com/news/cmsgqvl1h0dwsro5qu69r1g0b/","dateCreated":"2026-08-05T23:45:32.000Z","author":{"@type":"Organization","@id":"https://www.aioga.com/authors/aioga-editorial/#editorial-team","name":"Aioga Editorial Team","url":"https://www.aioga.com/authors/aioga-editorial/"}},"evidence":[{"@type":"CreativeWork","name":"Simon Willison 博客 source article","url":"https://simonwillison.net/2026/Aug/5/third-party-cyber-evaluations","datePublished":"2026-08-05T23:45:32.000Z","provider":{"@type":"Organization","name":"Simon Willison 博客","url":"https://simonwillison.net/2026/Aug/5/third-party-cyber-evaluations"}},{"@type":"CreativeWork","name":"AIHot archive record","url":"https://aihot.virxact.com/items/cmsgqvl1h0dwsro5qu69r1g0b","datePublished":"2026-08-05T23:45:32.000Z","provider":{"@type":"Organization","name":"AIHot","url":"https://aihot.virxact.com/items/cmsgqvl1h0dwsro5qu69r1g0b"}}],"aggregationSource":"Simon Willison 博客","originalPublisher":{"name":"Simon Willison 博客","url":"https://simonwillison.net/2026/Aug/5/third-party-cyber-evaluations"},"geoDeepAnswer":null,"article":{"id":"cmsgqvl1h0dwsro5qu69r1g0b","slug":"cmsgqvl1h0dwsro5qu69r1g0b","url":"https://www.aioga.com/news/cmsgqvl1h0dwsro5qu69r1g0b/","title":"OpenAI 披露第三方网络安全评估事故：测试环境配置错误致模型访问公网","title_en":"Third-party cyber evaluations involving OpenAI models","summary":"OpenAI 发文披露其外部网络安全测试伙伴 Irregular 在运行 CTF 式评估时，因测试环境配置错误使模型得以访问公网。一次测试中，虚构目标名称与真实域名重合，模型误将真实网站当作模拟环境的一部分加以利用。Anthropic 的报告中亦提及 Irregular，其托管的错误配置评估环境曾让 Claude 在部分测试中获取实时互联网访问权限。","source":"Simon Willison 博客","sourceUrl":"https://simonwillison.net/2026/Aug/5/third-party-cyber-evaluations","aiHotUrl":"https://aihot.virxact.com/items/cmsgqvl1h0dwsro5qu69r1g0b","publishedAt":"2026-08-05T23:45:32.000Z","category":"行业动态","score":55,"selected":false,"articleBody":["Third-party cyber evaluations involving OpenAI models：https://openai.com/index/third-party-cyber-evaluations-involving-openai-models/ . And another one . I had to create a accidental-cyberattacks tag：https://simonwillison.net/tags/accidental-cyberattacks/ to keep track of them all!","This post from OpenAI covers both the UK AI Safety Institute attack (see my previous post：https://simonwillison.net/2026/Aug/5/incident-report/) and another attack enabled by Irregular：https://www.irregular.com:","Irregular, one of our external cybersecurity testing partners, was running Capture-the-Flag-style evaluations intended to be isolated from the internet, but a testing-environment misconfiguration allowed models to access the public internet. [...]","In one test, the name of the fictional target for the CTF challenge unintentionally coincided with a real domain. Because the testing environment was mistakenly connected to the internet, the model exploited a real website, mistaking it to be part of the simulated environment.","Irregular also feature in Anthropic's write-up：https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals - they were hosting the misconfigured evaluation environment which gave Claude live internet access during some of those tests.","This is a link post by Simon Willison, posted on 5th August 2026：/2026/Aug/5/.","Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments."],"articleImages":[],"mediaStatus":"none","articleBodyZh":["涉及 OpenAI 模型的第三方网络安全评估：https://openai.com/index/third-party-cyber-evaluations-involving-openai-models/。还有另一个。我不得不创建了一个 accidental-cyberattacks 标签：https://simonwillison.net/tags/accidental-cyberattacks/ 来跟踪所有事件！","这篇来自 OpenAI 的帖子涵盖了英国 AI 安全研究所的攻击（请参见我之前的帖子：https://simonwillison.net/2026/Aug/5/incident-report/）以及另一次由 Irregular 促成的攻击：https://www.irregular.com：","Irregular 是我们的外部网络安全测试合作伙伴之一，他们运行了 Capture-the-Flag 风格的评估，原本计划与互联网隔离，但测试环境的配置错误使模型能够访问公共互联网。[…]","在一次测试中，用于 CTF 挑战的虚构目标名称意外地与一个真实域名相同。由于测试环境错误地连接到了互联网，模型攻击了一个真实网站，并误以为它是模拟环境的一部分。","Irregular 也出现在 Anthropic 的报告中：https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals - 他们托管了配置错误的评估环境，这些测试中 Claude 因此可以访问实时互联网。","这是 Simon Willison 发布的一篇链接帖子，发布时间为 2026 年 8 月 5 日：/2026/Aug/5/。","赞助我每月 10 美元，即可获取经过策划的本月最重要大型语言模型发展的电子邮件摘要。"],"translationStatus":"translated","bodyOrigin":"source-page","editorial":{"summary":"OpenAI披露，一家外部网络安全测试伙伴在运行原拟隔离的CTF式评估时发生环境配置错误，使模型获得公网访问权限，并误将真实网站当作模拟目标加以利用。","background":"材料称，测试中的虚构目标名称与真实域名意外重合；由于评估环境连接互联网，模型对真实网站采取了原本针对模拟环境的利用行为。Anthropic报告也提到同一伙伴托管的评估环境曾让Claude在部分测试中获得实时互联网访问权限。","viewpoint":"Aioga判断，事件核心不是模型在正常隔离条件下的能力结论，而是第三方评估的环境边界未被有效守住。将真实域名纳入测试命名或目标体系，会放大配置错误的实际影响，值得关注评估治理与复核机制。","implications":"这起披露可能促使模型安全评估更加重视网络隔离、目标命名冲突检查和测试环境复核。由于材料未说明具体损害范围、受影响模型数量或后续整改措施，相关影响不宜进一步推断。","nextStep":"后续应重点核对OpenAI及相关测试方是否公布受影响测试的范围、发现与处置过程，以及是否说明隔离验证、域名冲突检查和第三方评估监督的改进安排。","evidenceRefs":["title","summary","articleBody","source"],"status":"published","aiGenerated":true,"autoApproved":true,"generatedBy":"aioga-editorial:gpt-5.6-sol","reviewedBy":"aioga-editorial-review:gpt-5.6-sol","generatedAt":"2026-08-10T02:23:01.340Z","sourceHash":"dc4fcc776b4f7565","review":{"approved":true,"groundedness":95,"clarity":91,"duplicationRisk":12,"blockingIssues":[],"notes":["“将真实域名纳入测试命名或目标体系”可能暗示主动纳入；来源表述为虚构目标名称与真实域名意外重合。可改为“虚构目标名称与真实域名发生重合”，以避免歧义。"]},"validation":{"passed":true,"mode":"ai-auto","revisions":0,"checks":["schema","length","source-attribution","low-source-overlap","no-html","independent-ai-review"]}},"tags":["行业动态","Simon Willison 博客"],"translations":{"zh-CN":{"title":"OpenAI 披露第三方网络安全评估事故：测试环境配置错误致模型访问公网","summary":"OpenAI 发文披露其外部网络安全测试伙伴 Irregular 在运行 CTF 式评估时，因测试环境配置错误使模型得以访问公网。一次测试中，虚构目标名称与真实域名重合，模型误将真实网站当作模拟环境的一部分加以利用。Anthropic 的报告中亦提及 Irregular，其托管的错误配置评估环境曾让 Claude 在部分测试中获取实时互联网访问权限。","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI 披露第三方网络安全评估事故：测试环境配置错误致模型访问公网 - Aioga AI资讯","description":"OpenAI 发文披露其外部网络安全测试伙伴 Irregular 在运行 CTF 式评估时，因测试环境配置错误使模型得以访问公网。一次测试中，虚构目标名称与真实域名重合，模型误将真实网站当作模拟环境的一部分加以利用。Anthropic 的报告中亦提及 Irregular，其托管的错误配置评估环境曾让 Claude 在部分测试中获取实时互联网访问权限。","url":"https://www.aioga.com/news/cmsgqvl1h0dwsro5qu69r1g0b/","articleBody":["涉及 OpenAI 模型的第三方网络安全评估：https://openai.com/index/third-party-cyber-evaluations-involving-openai-models/。还有另一个。我不得不创建了一个 accidental-cyberattacks 标签：https://simonwillison.net/tags/accidental-cyberattacks/ 来跟踪所有事件！","这篇来自 OpenAI 的帖子涵盖了英国 AI 安全研究所的攻击（请参见我之前的帖子：https://simonwillison.net/2026/Aug/5/incident-report/）以及另一次由 Irregular 促成的攻击：https://www.irregular.com：","Irregular 是我们的外部网络安全测试合作伙伴之一，他们运行了 Capture-the-Flag 风格的评估，原本计划与互联网隔离，但测试环境的配置错误使模型能够访问公共互联网。[…]","在一次测试中，用于 CTF 挑战的虚构目标名称意外地与一个真实域名相同。由于测试环境错误地连接到了互联网，模型攻击了一个真实网站，并误以为它是模拟环境的一部分。","Irregular 也出现在 Anthropic 的报告中：https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals - 他们托管了配置错误的评估环境，这些测试中 Claude 因此可以访问实时互联网。","这是 Simon Willison 发布的一篇链接帖子，发布时间为 2026 年 8 月 5 日：/2026/Aug/5/。","赞助我每月 10 美元，即可获取经过策划的本月最重要大型语言模型发展的电子邮件摘要。"]},"en":{"title":"OpenAI Discloses Third-Party Cybersecurity Assessment Incident: Misconfigured Test Environment Allowed Model to Access Public Internet","summary":"OpenAI issued a statement revealing that its external cybersecurity testing partner, Irregular, mistakenly allowed the model to access the public internet due to a misconfigured test environment during a CTF-style evaluation. In one test, a fictitious target name overlapped with a real domain, causing the model to mistakenly treat the real website as part of the simulated environment. Anthropic's report also mentioned Irregular, whose misconfigured hosted evaluation environment allowed Claude to access real-time internet during some tests.","category":"Industry","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI Discloses Third-Party Cybersecurity Assessment Incident: Misconfigured Test Environment Allowed Model to Access Public Internet - Aioga AI News","description":"OpenAI issued a statement revealing that its external cybersecurity testing partner, Irregular, mistakenly allowed the model to access the public internet due to a misconfigured te...","url":"https://www.aioga.com/en/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:26:27.059Z"},"ja":{"title":"OpenAIが第三者のサイバーセキュリティ評価インシデントを公開:テスト環境の設定ミスがモデルの公共インターネットへのアクセスを引き起こす","summary":"OpenAIは、外部のサイバーセキュリティテストパートナーであるIregularが、CTFスタイルの評価中にテスト環境の設定ミスによりパブリックネットワークにアクセスできたと報告書を発表しました。 あるテストでは、架空のターゲット名が実際のドメイン名と重なり、モデルが誤って実際のウェブサイトをシミュレーション環境の一部として使用してしまいました。 Anthropicの報告書では、Irregularも言及されており、Irregularのホストされたミス設定評価環境はかつてクロードが一部のテストでリアルタイムインターネットアクセスを得ていました。","category":"業界動向","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAIが第三者のサイバーセキュリティ評価インシデントを公開:テスト環境の設定ミスがモデルの公共インターネットへのアクセスを引き起こす - Aioga AIニュース","description":"OpenAIは、外部のサイバーセキュリティテストパートナーであるIregularが、CTFスタイルの評価中にテスト環境の設定ミスによりパブリックネットワークにアクセスできたと報告書を発表しました。 あるテストでは、架空のターゲット名が実際のドメイン名と重なり、モデルが誤って実際のウェブサイトをシミュレーション環境の一部として使用してしまいました。 Anthr...","url":"https://www.aioga.com/ja/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:26:28.857Z"},"ko":{"title":"OpenAI가 제3자 사이버보안 평가 사고를 공개: 잘못된 테스트 환경 구성으로 인해 모델이 공용 인터넷에 접근하게 됨","summary":"OpenAI는 외부 사이버보안 테스트 파트너인 Iregular가 CTF 스타일 평가 중 테스트 환경의 잘못 설정으로 인해 공개 네트워크에 접근할 수 있었다는 보고서를 발표했습니다. 한 테스트에서는 가상의 대상 이름이 실제 도메인 이름과 겹쳐졌고, 모델이 실수로 실제 웹사이트를 시뮬레이션 환경의 일부로 사용했습니다. Anthropic의 보고서에는 Irregular도 언급되었는데, Irregular의 호스팅된 잘못된 구성 평가 환경이 일부 테스트에서 Claude가 실시간 인터넷 접속을 가능하게 해주었습니다.","category":"업계 동향","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI가 제3자 사이버보안 평가 사고를 공개: 잘못된 테스트 환경 구성으로 인해 모델이 공용 인터넷에 접근하게 됨 - Aioga AI 뉴스","description":"OpenAI는 외부 사이버보안 테스트 파트너인 Iregular가 CTF 스타일 평가 중 테스트 환경의 잘못 설정으로 인해 공개 네트워크에 접근할 수 있었다는 보고서를 발표했습니다. 한 테스트에서는 가상의 대상 이름이 실제 도메인 이름과 겹쳐졌고, 모델이 실수로 실제 웹사이트를 시뮬레이션 환경의 일부로 사용했습니다. Ant...","url":"https://www.aioga.com/ko/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:26:37.608Z"},"es":{"title":"OpenAI revela un incidente de evaluación de ciberseguridad de terceros: una configuración incorrecta del entorno de prueba provoca acceso del modelo a internet público","summary":"OpenAI publicó un informe en el que revela que su socio externo de pruebas de ciberseguridad, Iregular, pudo acceder a la red pública debido a una mala configuración del entorno de pruebas durante evaluaciones al estilo CTF. En una prueba, un nombre objetivo ficticio se solapó con un nombre de dominio real, y el modelo usó erróneamente el sitio web real como parte del entorno simulado. El informe de Anthropic también mencionó a Irregular, cuyo entorno alojado de evaluación de desconfiguración permitió a Claude acceder a internet en tiempo real en algunas pruebas.","category":"Industria","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI revela un incidente de evaluación de ciberseguridad de terceros: una configuración incorrecta del entorno de prueba provoca acceso del modelo a internet público - Aioga Noticias de IA","description":"OpenAI publicó un informe en el que revela que su socio externo de pruebas de ciberseguridad, Iregular, pudo acceder a la red pública debido a una mala configuración del entorno de...","url":"https://www.aioga.com/es/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:26:37.523Z"},"fr":{"title":"OpenAI divulgue un incident d’évaluation de cybersécurité tierce : une configuration incorrecte de l’environnement de test entraîne un accès du modèle à l’internet public","summary":"OpenAI a publié un rapport révélant que son partenaire externe de tests de cybersécurité, Iregular, a pu accéder au réseau public en raison d’une mauvaise configuration de l’environnement de test lors d’évaluations de type CTF. Dans un test, un nom cible fictif chevauchait un nom de domaine réel, et le modèle utilisait par erreur le site web réel dans l’environnement simulé. Le rapport d’Anthropic mentionnait également Irregular, dont l’environnement d’évaluation de la mauvaise configuration hébergé permettait autrefois à Claude d’accéder à Internet en temps réel lors de certains tests.","category":"Industrie","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI divulgue un incident d’évaluation de cybersécurité tierce : une configuration incorrecte de l’environnement de test entraîne un accès du modèle à l’internet public - Aioga Actualités IA","description":"OpenAI a publié un rapport révélant que son partenaire externe de tests de cybersécurité, Iregular, a pu accéder au réseau public en raison d’une mauvaise configuration de l’enviro...","url":"https://www.aioga.com/fr/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:26:45.824Z"},"de":{"title":"OpenAI legt Vorfall bei der Bewertung der Cybersicherheit durch Dritte offen: Fehlkonfiguration der Testumgebung führte zum Zugriff des Modells auf das öffentliche Netz","summary":"OpenAI veröffentlichte, dass sein externer Cybersecurity-Testpartner Irregular bei der Durchführung einer CTF-ähnlichen Bewertung aufgrund einer Fehlkonfiguration der Testumgebung dem Modell den Zugriff auf das öffentliche Netz ermöglichte. In einem Test überschritt der fiktive Zielname die reale Domain, wodurch das Modell die echte Website fälschlicherweise als Teil der simulierten Umgebung nutzte. Auch der Bericht von Anthropic erwähnte Irregular: Die von ihnen bereitgestellte falsch konfigurierte Testumgebung ermöglichte Claude in einigen Tests den Zugriff auf das Internet in Echtzeit.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI legt Vorfall bei der Bewertung der Cybersicherheit durch Dritte offen: Fehlkonfiguration der Testumgebung führte zum Zugriff des Modells auf das öffentliche Netz - Aioga KI-News","description":"OpenAI veröffentlichte, dass sein externer Cybersecurity-Testpartner Irregular bei der Durchführung einer CTF-ähnlichen Bewertung aufgrund einer Fehlkonfiguration der Testumgebung...","url":"https://www.aioga.com/de/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:26:44.527Z"},"pt-BR":{"title":"OpenAI divulga incidente de avaliação de cibersegurança de terceiros: configuração incorreta do ambiente de teste causa acesso do modelo à internet pública","summary":"A OpenAI publicou um relatório revelando que seu parceiro externo de testes de cibersegurança, o Iregular, conseguiu acessar a rede pública devido a uma configuração incorreta do ambiente de teste durante avaliações no estilo CTF. Em um teste, um nome alvo fictício se sobrepôs a um nome de domínio real, e o modelo usou erroneamente o site real como parte do ambiente simulado. O relatório da Anthropic também mencionou o Irregular, cujo ambiente de avaliação de desconfiguração hospedado permitiu que Claude acessasse internet em tempo real em alguns testes.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI divulga incidente de avaliação de cibersegurança de terceiros: configuração incorreta do ambiente de teste causa acesso do modelo à internet pública - Aioga Notícias de IA","description":"A OpenAI publicou um relatório revelando que seu parceiro externo de testes de cibersegurança, o Iregular, conseguiu acessar a rede pública devido a uma configuração incorreta do a...","url":"https://www.aioga.com/pt-BR/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:26:54.381Z"},"ru":{"title":"OpenAI раскрывает инцидент оценки кибербезопасности третьей стороны: неправильная конфигурация тестовой среды приводит к доступу модели к публичному интернету","summary":"OpenAI опубликовала отчёт, в котором раскрывается, что его внешний партнёр по тестированию кибербезопасности, Iregular, смог получить доступ к публичной сети из-за неправильной настройки тестовой среды во время оценок в стиле CTF. В одном из тестов вымышленное целевой имя перекрылось с реальным доменным именем, и модель ошибочно использовала реальный сайт как часть смоделированной среды. В отчёте Anthropic также упоминался Irregular, чья среда оценки неправильной конфигурации когда-то позволяла Claude получать доступ в интернет в реальном времени в некоторых тестах.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI раскрывает инцидент оценки кибербезопасности третьей стороны: неправильная конфигурация тестовой среды приводит к доступу модели к публичному интернету - Aioga Новости ИИ","description":"OpenAI опубликовала отчёт, в котором раскрывается, что его внешний партнёр по тестированию кибербезопасности, Iregular, смог получить доступ к публичной сети из-за неправильной нас...","url":"https://www.aioga.com/ru/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:26:53.089Z"},"ar":{"title":"تكشف OpenAI عن حادثة تقييم الأمن السيبراني من طرف ثالث: تكوين بيئة اختبار غير صحيح يسبب وصول النموذج إلى الإنترنت العام","summary":"نشرت OpenAI تقريرا يكشف فيه أن شريكها الخارجي في اختبار الأمن السيبراني، Iregular، تمكن من الوصول إلى الشبكة العامة بسبب سوء تكوين بيئة الاختبار أثناء تقييمات على نمط CTF. في أحد الاختبارات، تداخل اسم هدف وهمي مع اسم نطاق حقيقي، واستخدم النموذج الموقع الإلكتروني الحقيقي عن طريق الخطأ كجزء من البيئة المحاكاة. ذكر تقرير Anthropic أيضا شركة Irregular، التي سمحت بيئة تقييم سوء التكوين المستضافة الخاصة بها سابقا بكلود بالحصول على وصول فوري للإنترنت في بعض الاختبارات.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"تكشف OpenAI عن حادثة تقييم الأمن السيبراني من طرف ثالث: تكوين بيئة اختبار غير صحيح يسبب وصول النموذج إلى الإنترنت العام - Aioga أخبار الذكاء الاصطناعي","description":"نشرت OpenAI تقريرا يكشف فيه أن شريكها الخارجي في اختبار الأمن السيبراني، Iregular، تمكن من الوصول إلى الشبكة العامة بسبب سوء تكوين بيئة الاختبار أثناء تقييمات على نمط CTF. في أحد ا...","url":"https://www.aioga.com/ar/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:27:02.637Z"},"hi":{"title":"OpenAI ने तृतीय-पक्ष साइबर सुरक्षा मूल्यांकन घटना का खुलासा किया: गलत परीक्षण वातावरण कॉन्फ़िगरेशन सार्वजनिक इंटरनेट तक मॉडल की पहुंच का कारण बनता है","summary":"OpenAI ने एक रिपोर्ट प्रकाशित की जिसमें खुलासा किया गया है कि उसका बाहरी साइबर सुरक्षा परीक्षण भागीदार, Iregular, CTF-शैली के आकलन के दौरान परीक्षण वातावरण के गलत कॉन्फ़िगरेशन के कारण सार्वजनिक नेटवर्क तक पहुंचने में सक्षम था। एक परीक्षण में, एक काल्पनिक लक्ष्य नाम एक वास्तविक डोमेन नाम के साथ ओवरलैप हो गया, और मॉडल ने गलती से नकली वातावरण के हिस्से के रूप में वास्तविक वेबसाइट का उपयोग कर लिया। एंथ्रोपिक की रिपोर्ट में अनियमित का भी उल्लेख किया गया है, जिसके होस्ट किए गए गलत कॉन्फ़िगरेशन मूल्यांकन वातावरण ने एक बार क्लाउड को कुछ परीक्षणों में वास्तविक समय इंटरनेट एक्सेस प्राप्त करने की अनुमति दी थी।","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI ने तृतीय-पक्ष साइबर सुरक्षा मूल्यांकन घटना का खुलासा किया: गलत परीक्षण वातावरण कॉन्फ़िगरेशन सार्वजनिक इंटरनेट तक मॉडल की पहुंच का कारण बनता है - Aioga AI समाचार","description":"OpenAI ने एक रिपोर्ट प्रकाशित की जिसमें खुलासा किया गया है कि उसका बाहरी साइबर सुरक्षा परीक्षण भागीदार, Iregular, CTF-शैली के आकलन के दौरान परीक्षण वातावरण के गलत कॉन्फ़िगरेशन के क...","url":"https://www.aioga.com/hi/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:27:02.836Z"},"it":{"title":"OpenAI rivela un incidente di valutazione della cybersecurity di terze parti: configurazione errata dell'ambiente di test causa l'accesso del modello a internet pubblico","summary":"OpenAI ha pubblicato un rapporto che rivela che il suo partner esterno di test di cybersecurity, Iregular, è riuscito ad accedere alla rete pubblica a causa di una configurazione errata dell'ambiente di test durante le valutazioni in stile CTF. In un test, un nome target fittizio si sovrapponeva a un dominio reale, e il modello utilizzava erroneamente il sito web reale come parte dell'ambiente simulato. Il rapporto di Anthropic menzionava anche Irregular, il cui ambiente ospitato di valutazione della configurazione errata permetteva a Claude di ottenere accesso a internet in tempo reale in alcuni test.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI rivela un incidente di valutazione della cybersecurity di terze parti: configurazione errata dell'ambiente di test causa l'accesso del modello a internet pubblico - Aioga Notizie IA","description":"OpenAI ha pubblicato un rapporto che rivela che il suo partner esterno di test di cybersecurity, Iregular, è riuscito ad accedere alla rete pubblica a causa di una configurazione e...","url":"https://www.aioga.com/it/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:27:09.932Z"},"nl":{"title":"OpenAI onthult incident met externe cyberbeveiligingsbeoordeling: fout bij testomgeving veroorzaakte toegang van het model tot het openbare web","summary":"OpenAI publiceerde dat hun externe netwerkbeveiligingstestpartner Irregular tijdens een CTF-achtige evaluatie door een fout in de testomgeving het model toegang tot het openbare internet had. Tijdens een test kwam de fictieve doelnaam overeen met een echte domeinnaam, waardoor het model de echte website als onderdeel van de gesimuleerde omgeving gebruikte. Ook in het rapport van Anthropic werd Irregular genoemd; hun verkeerd geconfigureerde testomgeving liet Claude in sommige tests toegang tot internet in real-time krijgen.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI onthult incident met externe cyberbeveiligingsbeoordeling: fout bij testomgeving veroorzaakte toegang van het model tot het openbare web - Aioga AI-nieuws","description":"OpenAI publiceerde dat hun externe netwerkbeveiligingstestpartner Irregular tijdens een CTF-achtige evaluatie door een fout in de testomgeving het model toegang tot het openbare in...","url":"https://www.aioga.com/nl/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:27:09.186Z"},"tr":{"title":"OpenAI, üçüncü taraf siber güvenlik değerlendirme olayı açığa çıkardı: yanlış test ortamı yapılandırması modelin halka açık internete erişimine neden olur","summary":"OpenAI, dış siber güvenlik test ortağı Iregular'ın, CTF tarzı değerlendirmeler sırasında test ortamının yanlış yapılandırması nedeniyle kamu ağına erişebildiğini açıklayan bir rapor yayımladı. Bir testte, hayali bir hedef adı gerçek bir alan adıyla örtüşüyor ve model yanlışlıkla gerçek web sitesini simüle edilmiş ortamın bir parçası olarak kullanmıştır. Anthropic'in raporunda ayrıca Irregular'dan da bahsediliyor; bir zamanlar barındırılan yanlış yapılandırma değerlendirme ortamı Claude'un bazı testlerde gerçek zamanlı internet erişimi sağlamasına olanak sağladı.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI, üçüncü taraf siber güvenlik değerlendirme olayı açığa çıkardı: yanlış test ortamı yapılandırması modelin halka açık internete erişimine neden olur - Aioga AI Haberleri","description":"OpenAI, dış siber güvenlik test ortağı Iregular'ın, CTF tarzı değerlendirmeler sırasında test ortamının yanlış yapılandırması nedeniyle kamu ağına erişebildiğini açıklayan bir rapo...","url":"https://www.aioga.com/tr/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:27:18.453Z"},"vi":{"title":"OpenAI tiết lộ sự cố đánh giá an ninh mạng của bên thứ ba: cấu hình môi trường thử nghiệm không đúng khiến mô hình truy cập internet công cộng","summary":"OpenAI đã công bố một báo cáo tiết lộ rằng đối tác kiểm thử an ninh mạng bên ngoài của mình, Iregular, đã có thể truy cập mạng công cộng do cấu hình sai môi trường kiểm thử trong các bài đánh giá kiểu CTF. Trong một bài kiểm tra, tên mục tiêu giả chồng lên tên miền thật, và mô hình đã nhầm lẫn sử dụng trang web thật như một phần của môi trường mô phỏng. Báo cáo của Anthropic cũng đề cập đến Irregular, nơi có môi trường đánh giá cấu hình sai được lưu trữ từng cho phép Claude truy cập internet theo thời gian thực trong một số bài kiểm tra.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI tiết lộ sự cố đánh giá an ninh mạng của bên thứ ba: cấu hình môi trường thử nghiệm không đúng khiến mô hình truy cập internet công cộng - Tin tức AI Aioga","description":"OpenAI đã công bố một báo cáo tiết lộ rằng đối tác kiểm thử an ninh mạng bên ngoài của mình, Iregular, đã có thể truy cập mạng công cộng do cấu hình sai môi trường kiểm thử trong c...","url":"https://www.aioga.com/vi/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:27:18.401Z"},"id":{"title":"OpenAI mengungkapkan insiden penilaian keamanan siber pihak ketiga: konfigurasi lingkungan pengujian yang salah menyebabkan akses model ke internet publik","summary":"OpenAI menerbitkan laporan yang mengungkapkan bahwa mitra pengujian keamanan siber eksternalnya, Iregular, dapat mengakses jaringan publik karena salah konfigurasi lingkungan pengujian selama penilaian gaya CTF. Dalam satu pengujian, nama target fiktif tumpang tindih dengan nama domain nyata, dan model secara keliru menggunakan situs web asli sebagai bagian dari lingkungan simulasi. Laporan Anthropic juga menyebutkan Irregular, yang lingkungan penilaian miskonfigurasi yang dihosting pernah memungkinkan Claude mendapatkan akses internet real-time dalam beberapa tes.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI mengungkapkan insiden penilaian keamanan siber pihak ketiga: konfigurasi lingkungan pengujian yang salah menyebabkan akses model ke internet publik - Berita AI Aioga","description":"OpenAI menerbitkan laporan yang mengungkapkan bahwa mitra pengujian keamanan siber eksternalnya, Iregular, dapat mengakses jaringan publik karena salah konfigurasi lingkungan pengu...","url":"https://www.aioga.com/id/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:27:26.912Z"},"th":{"title":"OpenAI เปิดเผยเหตุการณ์ประเมินความปลอดภัยไซเบอร์ของบุคคลที่สาม: การตั้งค่าสภาพแวดล้อมทดสอบที่ไม่ถูกต้องทําให้โมเดลเข้าถึงอินเทอร์เน็ตสาธารณะได้","summary":"OpenAI เผยแพร่รายงานเปิดเผยว่าพันธมิตรทดสอบความปลอดภัยไซเบอร์ภายนอก Iregular สามารถเข้าถึงเครือข่ายสาธารณะได้เนื่องจากการตั้งค่าสภาพแวดล้อมทดสอบผิดพลาดในระหว่างการประเมินแบบ CTF ในการทดสอบหนึ่ง ชื่อเป้าหมายสมมติทับซ้อนกับชื่อโดเมนจริง และโมเดลใช้เว็บไซต์จริงเป็นส่วนหนึ่งของสภาพแวดล้อมจําลองโดยผิดพลาด รายงานของ Anthropic ยังกล่าวถึง Irregular ซึ่งเคยมีสภาพแวดล้อมการประเมินการกําหนดค่าผิดพลาดแบบโฮสต์ที่อนุญาตให้ Claude เข้าถึงอินเทอร์เน็ตแบบเรียลไทม์ในบางการทดสอบ","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI เปิดเผยเหตุการณ์ประเมินความปลอดภัยไซเบอร์ของบุคคลที่สาม: การตั้งค่าสภาพแวดล้อมทดสอบที่ไม่ถูกต้องทําให้โมเดลเข้าถึงอินเทอร์เน็ตสาธารณะได้ - ข่าว AI Aioga","description":"OpenAI เผยแพร่รายงานเปิดเผยว่าพันธมิตรทดสอบความปลอดภัยไซเบอร์ภายนอก Iregular สามารถเข้าถึงเครือข่ายสาธารณะได้เนื่องจากการตั้งค่าสภาพแวดล้อมทดสอบผิดพลาดในระหว่างการประเมินแบบ CTF ใน...","url":"https://www.aioga.com/th/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:27:26.278Z"},"pl":{"title":"OpenAI ujawnia incydent oceny cyberbezpieczeństwa przez strony zewnętrzne: nieprawidłowa konfiguracja środowiska testowego powoduje dostęp modelu do publicznego internetu","summary":"OpenAI opublikowało raport ujawniający, że jego zewnętrzny partner testujący cyberbezpieczeństwo, Iregular, mógł uzyskać dostęp do sieci publicznej z powodu błędnej konfiguracji środowiska testowego podczas ocen w stylu CTF. W jednym z testów fikcyjna nazwa docelowa nakładała się na prawdziwą domenę, a model błędnie użył prawdziwej strony jako części symulowanego środowiska. W raporcie Anthropic wspomniano także o Irregular, którego środowisko oceny błędów konfiguracji hostowane kiedyś pozwalało Claude'owi uzyskać dostęp do internetu w czasie rzeczywistym w niektórych testach.","category":"行业动态","source":"Simon Willison 博客","aggregationSource":"Simon Willison 博客","pageTitle":"OpenAI ujawnia incydent oceny cyberbezpieczeństwa przez strony zewnętrzne: nieprawidłowa konfiguracja środowiska testowego powoduje dostęp modelu do publicznego internetu - Aioga Wiadomości AI","description":"OpenAI opublikowało raport ujawniający, że jego zewnętrzny partner testujący cyberbezpieczeństwo, Iregular, mógł uzyskać dostęp do sieci publicznej z powodu błędnej konfiguracji śr...","url":"https://www.aioga.com/pl/news/cmsgqvl1h0dwsro5qu69r1g0b/","contentTranslated":true,"sourceHash":"95db3d2bdc6aee88","translatedAt":"2026-08-06T00:27:35.398Z"}}}}