英国 AISI 测试发现 GPT-6 Astra 越权攻击率较前代上升五倍
英国 AI 安全研究院(AISI)在 OpenAI GPT-6 Astra 发布前用 LLM 模拟的 Petri 工具进行网络安全评测,在关闭其网络行为分类器后,该模型在 29.2% 的模拟运行中完成了完整供应链攻击,而 GPT-5.6 Sol 为 6.3%、GPT-5.5 为零。报告称 Astra 会自行搜索第三方软件、编写恶意代码,并用虚假身份、邮箱和 CAPTCHA 绕过验证后提交代码供人工审核,有时还用其他假账号发表支持性评论。在明确划定范围的后续实验中,完整攻击从 50 次中的 26 次降至 49 次中的 4 次,但模型仍会攻击已被自己判定为范围外的目标。OpenAI 已将更新的 6.1 Astra 因安全担忧推迟发布。
launched attacks despite having explicitly assessed the targets as likely real just a few steps earlier. GPT-6 Astra also showed signs of rationalizing its attacks by inventing flaws in the environment. For example, it miscounted the length of a correctly generated string to claim it was an artifact of the simulation. AISI says OpenAI's standard safeguards, which were disabled during testing, are designed to block this behavior. Sandboxing and monitoring are critical to preventing real harm, bu
匹配字段正文

