Skip to content

Translation in progress Some entries still include text in the original language.

Meta · News

Oct 13 · Tuesday

Meta · News

Latest publications and developments
Oct 7Wed
  1. TechCrunch AI, Meta NewsroomTechCrunch AI · 2 sources · 2 reports · 41

    Meta用AI检测导流CSAM的广告

    Meta 公布多项打击儿童性剥削的新措施:用新的大语言模型检测广告中隐蔽指向儿童性虐待内容的“signposting”,加强对广告跳转目的地的识别,扩大 AI 广告扫描,并部署红队 AI 智能体主动探测自身防御弱点。Meta 自报 2026 年 1 月至 6 月在印度处置 530 万条相关内容,超 98% 为主动发现。TechCrunch 报道称,Meta 宣布 2026 年上半年对 Facebook 和 Instagram 上 3320 万条儿童性剥削内容采取行动,其中超过 97% 由系统在用户举报前发现,印度同期处置 530 万条、98% 以上为主动发现;Meta 因此开始审查广告的跳转目的地而不只是广告内容本身,并可封禁违规网站和处置相关账号。

Oct 2Fri
  1. TechCrunch AI, The Verge AI · 6 sourcesTechCrunch AI · 6 sources · 6 reports · 48

    Apple tightens macOS Full Disk Access over AI agent risks

    Apple announced it will introduce additional controls for Full Disk Access on macOS, citing privacy risks from increased AI agent capabilities and autonomy. The permission, introduced in macOS Mojave, lets apps bypass system restrictions to read and write protected data, and was originally designed for backup apps, but some developers use it in ways that could expose files, email, messages, and browsing history, and for communication apps it could also affect the privacy of the people being communicated with. Apple said that in the future this level of access will only be granted through "very explicit user actions," but did not say when it will roll out or disclose how the controls will work in detail. The move is believed to be linked to recent reports: Meta's general-purpose AI agent Muse sent unsolicited notifications to tech columnist Jason Aten and cited his Apple Messages conversations, and Aten said he never granted Muse permission to read his messages.

Sep 8Tue
  1. Meta AI Research · 35

    Meta 如何为个人智能体 Muse 构建安全防护

    Meta 为个人智能体 Muse 设计了 Muse Secure VM 安全架构,将智能体运行环境与安全敏感服务隔离。其运行时容器以 systemd-nspawn 运行,root 映射为非特权主机用户,并限制系统调用与内核能力;hatch-safety、privsep、hatch-authd 和 Sentinel 等组件在容器外独立运行,分别负责模型请求审查、凭证隔离与网络出口管控。Muse 的 bug bounty 计划向公众开放,有效报告最高奖励 30 万美元,其中影响单个用户的提示注入攻击最高奖励 13 万美元。

Apr 16Thu
  1. OGX · 26

    OGX 修复上游模板处理安全漏洞:改用 Jinja2 沙箱环境

    OGX 在 llama_stack 的 file_search 工具运行时中,将提示词模板渲染从 Jinja2 的 Template 改为 SandboxedEnvironment,以修复上游模板处理的安全问题。改动位于 src/llama_stack/providers/inline/tool_runtime/file_search,涉及 llm_rag_query_generator 中 config.template 的渲染逻辑。

Oct 10, 2025Fri
  1. Sizhe Chen · 14

    Meta-SecAlign-70B 通过博士资格答辩

    通过了我的博士资格答辩(论文开题)!特别感谢导师 David Wagner 和 Chuan Guo 在过去两年的大力支持。我们的 Meta-SecAlign-70B 在提示注入安全性和智能体(工具/网页)实用性上与 GPT-5(high)相当。3 个月内下载量达 1 万次!

You have reached the end