澳大利亚总理称 OpenAI Agent 入侵政府网站
英文标题：🔶 OpenAI agent hacked Australian government website, PM says
澳大利亚一名部长表示，OpenAI 用于通报潜在安全事件的政府公共邮箱每天仅查看一次。相关入侵发生于 6 月 18 日，OpenAI 在 8 月的更广泛审查中发现潜在问题，并于 9 月 10 日通过邮件通知 Services Australia。Services Australia 于 9 月 15 日将通知上报澳大利亚网络安全中心，数日后公共服务部长 Katy Gallagher 获悉此事。事件凸显了政府机构对安全通报的邮箱监控、升级流程及与 AI 企业之间事件响应机制的不足。
15.5 KB
37.6 KB
19.5 KB
33.8 KB
8.4 KB
20.0 KB
8.9 KB
21.9 KB
15.9 KB
30.9 KB
8.5 KB
21.0 KB
3.3 KB
8.9 KB
12.4 KB
14.9 KB
1.6 KB
9.4 KB
11.9 KB
2.6 KB
中文
OpenAI 使用的电子邮件收件箱“每天查看一次”——澳大利亚部长发布于英国夏令时 10:26
英国夏令时 10:26
图片来源：Getty Images
令专家感到意外的不仅是一次由自主 AI 程序实施的入侵，还在于 OpenAI 三个月后才通过一封发往通用地址的电子邮件通知澳大利亚政府。
入侵发生在 6 月 18 日。OpenAI 表示，其在 8 月某个时候进行更广泛审查期间，发现了一起潜在入侵事件。
9 月 10 日，该公司向联邦政府综合服务枢纽 Services Australia 的公共收件箱发送了一封电子邮件。
9 月 15 日，Services Australia 将这项通知报告给澳大利亚网络安全中心。数日后，公共服务部长 Katy Gallagher 获悉此事。
记者询问为何 Services Australia 花了五天时间才通知网络安全中心时，Gallagher 承认该收件箱本可以得到更积极的监控——Gallagher 此前表示，目前该邮箱“每天查看一次”。
“有时它会收到相当多的通知，其中很多可能是恶作剧，”她说。
不过，Gallagher 表示，这项通知本不应该在一个邮件线程中被转发。
“它应该通过 ASD 的渠道，或通过 Services Australia 的高级管理层进行升级处理。”
图片来源：Reuters
图片说明：
Katy Gallagher 此前在悉尼向媒体讲话
English / 原文
Email inbox OpenAI used was 'looked at once a day' - Australian ministerpublished at 10:26 BST
10:26 BST
Image source, Getty Images
One thing that has surprised experts is not just the breach by an autonomous AI program - but the fact that OpenAI only told the Australian government three months later, via an email to general address.
The breach happened on 18 June. OpenAI said it became aware of a potential breach during a broader review sometime in August.
On 10 September , it sent an email to the public inbox of Services Australia, the general services hub of the federal government.
On 15 September, Services Australia reported the notification to the Australian Cyber Security Centre. A few days later, the Minister for the Public Service, Katy Gallagher, was notified.
Asked by reporters how it took five days for Services Australia to notify the cybersecurity centre, Gallagher acknowledged that the inbox could be more actively monitored â it is currently "looked at once a day", Gallagher said earlier.
"It gets sometimes quite a number of notifications, sometimes many of them are hoaxes," she said.
Still, the notification shouldn't have been passed along in an email thread, Gallagher said.
"It should have been escalated through ASD's channels or through the senior levels of Services Australia."
Image source, Reuters
Image caption,
Katy Gallagher, speaking to the media in Sydney earlier