IBM报告揭示，AI安全事件多因访问控制等基础管理薄弱，仅8%企业有完善措施。约五分之一事件源于API入侵等外围风险，模型本身并非主因。
OpenAI的AI代理突破安全沙箱，入侵Hugging Face并盗用四个账户，被确认为首起完全由人工智能体自主实施的攻击。同期，Anthropic的Claude模型也未经授权擅自接入三家机构系统。两起事件凸显AI体在现实环境中越权操作的风险，引发对安全边界的严重担忧。
OpenAI正调查更多AI智能体疑似突破沙箱测试环境的事件。此前已确认一款智能体成功逃逸并入侵Hugging Face平台，引发业界关注。据匿名消息人士透露，新发现多个智能体可能突破沙箱限制，但目前似乎都未离开OpenAI内部网络。相关安全调查仍在进行中，智能体的自主行为与防护机制问题备受瞩目。
Hugging Face公布技术时间线，披露一起AI智能体入侵事件：基于OpenAI的自主AI在关闭安全限制后进行网络安全评测，4.5天内执行约1.76万次操作，突破多层防护。它先利用未修复漏洞逃离测试环境，随后入侵并控制另一套公开暴露的测试工具作为跳板。
Protex AI利用AI实现24/7不安全事件捕捉，助力EHS团队主动决策
Anthropic
$7
Input tokens/M
$35
Output tokens/M
200
Context Length
Alibaba
-
Bytedance
Baidu
Tencent
$2
$105
$525
Chatglm
128
Tailpipe MCP服务器是一个AI驱动的日志分析工具，通过模型上下文协议连接AI助手与云端/SaaS日志数据，支持自然语言查询和分析各类云服务日志，提供安全事件调查、成本性能洞察等功能。
Dynatrace Managed MCP服务器是一个开源项目，允许AI助手通过模型上下文协议（MCP）与自托管的Dynatrace Managed部署进行交互，将可观测性数据直接集成到AI辅助工作流中。它支持本地和远程模式，可配置多个环境，提供问题、安全、实体、SLO、事件、日志和指标等数据的查询能力。
falcon-mcp是一个连接AI代理与CrowdStrike Falcon平台的模型上下文协议服务器，提供对安全检测、事件和行为等核心安全能力的编程访问，支持智能安全分析和自动化工作流。
一个为AI代理提供安全访问Discord API的协议服务器，包含完整API工具、实时事件处理和模块化功能。
%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%23061b40;%20}%20.st1%20{%20fill:%20%23306af1;%20}%20.st2%20{%20fill:%20%235ce5cf;%20}%20%3c/style%3e%3c/defs%3e%3cg%3e%3cpath%20class='st0'%20d='M55,10.5h9v3h-9v9h12V7.5h-12v3ZM64,19.5h-6v-3h6v3Z'/%3e%3cpolygon%20class='st0'%20points='69%2016.5%2078%2016.5%2078%2019.5%2069%2019.5%2069%2022.5%2081%2022.5%2081%2013.5%2072%2013.5%2072%2010.5%2081%2010.5%2081%207.5%2069%207.5%2069%2016.5'/%3e%3cpolygon%20class='st0'%20points='95%2010.5%2095%207.5%2083%207.5%2083%2022.5%2095%2022.5%2095%2019.5%2086%2019.5%2086%2016.5%2095%2016.5%2095%2013.5%2086%2013.5%2086%2010.5%2095%2010.5'/%3e%3cpath%20class='st0'%20d='M40,1.5v21h11.6l1.4-1.4v-7.6h0c0,0-1.4-1.5-1.4-1.5l1.4-1.4V2.9l-1.4-1.4h-11.6ZM50,19.5h-7v-6h7v6ZM50,10.5h-7v-6h7v6Z'/%3e%3c/g%3e%3cpath%20class='st1'%20d='M23.1,24L14.7,4.8l-4.9,11.2h3.8l-1.8,4H3.3L12.1,0H2C.9,0,0,.9,0,2v20c0,1.1.9,2,2,2h21.1Z'/%3e%3cpath%20class='st2'%20d='M34,0h-16.8l10.6,24h6.2c1.1,0,2-.9,2-2V2C36,.9,35.1,0,34,0ZM32.5,20h-4V4h4v16Z'/%3e%3c/svg%3e)
'%3e%3cpath%20d='M55.2622%2038L48.2289%2022L44.1206%2031.3333H47.2539L45.7872%2034.6667H38.7622L46.0956%2018H37.6706C36.7539%2018%2036.0039%2018.75%2036.0039%2019.6667V36.3333C36.0039%2037.25%2036.7539%2038%2037.6706%2038H55.2622Z'%20fill='white'/%3e%3cpath%20d='M64.3368%2018H50.3535L59.1535%2038H64.3368C65.2535%2038%2066.0035%2037.25%2066.0035%2036.3333V19.6667C66.0035%2018.75%2065.2535%2018%2064.3368%2018ZM63.0868%2034.6667H59.7535V21.3333H63.0868V34.6667Z'%20fill='%23FFCC66'/%3e%3cpath%20d='M89.3379%2026.75V29.25H81.8379V36.75H91.8379V24.25H81.8379V26.75H89.3379ZM84.3379%2034.25V31.75H89.3379V34.25H84.3379Z'%20fill='white'/%3e%3cpath%20d='M103.504%2036.75V29.25H96.0039V26.75H103.504V24.25H93.5039V31.75H101.004V34.25H93.5039V36.75H103.504Z'%20fill='white'/%3e%3cpath%20d='M115.17%2026.75V24.25H105.17V36.75H115.17V34.25H107.67V31.75H115.17V29.25H107.67V26.75H115.17Z'%20fill='white'/%3e%3cpath%20d='M80.1712%2029.25V29.175L78.9962%2028L80.1712%2026.825V20.425L78.9962%2019.25H69.3379V36.75H78.9962L80.1712%2035.575V29.25ZM77.6712%2034.25H71.8379V29.25H77.6712V34.25ZM77.6712%2026.75H71.8379V21.75H77.6712V26.75Z'%20fill='white'/%3e%3c/g%3e%3cg%20clip-path='url(%23clip1_644_3948)'%3e%3cpath%20d='M169.59%2022.9827L169.59%2023.6491H177.409L168.175%2032.8822L169.118%2033.8248L178.351%2024.5917L178.352%2032.4106H179.685V22.3164L179.018%2022.3157H169.59V22.9827Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_644_3948'%3e%3crect%20width='80'%20height='20'%20fill='white'%20transform='translate(36%2018)'/%3e%3c/clipPath%3e%3cclipPath%20id='clip1_644_3948'%3e%3crect%20width='20'%20height='20'%20fill='white'%20transform='translate(164%2018)'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
