Skip to content

Translation in progress Some entries still include text in the original language.

Defenses and guardrails · News

Oct 13 · Tuesday

Defenses and guardrails · News

Latest publications and developments
Oct 9Fri
  1. MIT Technology ReviewMIT Technology Review · 32

    MIT Technology Review: Disputes over the reliability of AI refusal mechanisms

    MIT Technology Review article discusses AI refusal mechanisms. The article points out that refusal has become a load-bearing wall of AI safety, but this mechanism is probabilistic in nature and destined to be difficult to make fully reliable. In 2021, Anthropic proposed that large language models should be helpful, honest, and harmless. Now models learn to refuse a large number of prompts through red team testing and AI-to-AI training, yet still retain knowledge for doing harm, with capability and benign intelligence growing in tandem. The article says some users are trying to use the most advanced AI to cultivate biological pathogens and build autonomous drone swarms, while the refusal boundary is secretly drawn by AI companies, and governments will also intervene.

  2. MIT Technology ReviewMIT Technology Review · 20

    MIT Technology Review: Over-reliance on AI refusals carries risks

    MIT Technology Review's The Download newsletter points out that current AI models are trained to refuse a large number of prompts, but the refusal mechanism can fail; some people are trying to use AI to cultivate biological pathogens and build autonomous drone swarms, and failed refusals could lead to a global catastrophe. The article also mentions the side effects of GLP-1 weight-loss drugs, the most common being gastrointestinal reactions, and researchers are also investigating possible associations with hair loss, nail disease, and nerve damage behind the eye.

Oct 2Fri
  1. X @florian_tramerX @florian_tramer · 28

    作者称已穷尽攻击评估思路

    2026年10月2日,X 用户 @florian_tramer 发文称,因见过太多被攻破的防御(其中不少是自己做的),人会变得有点偏执,因此一直推动做更多攻击评估,结果也因此更扎实。他表示仍不能保证不会出现更聪明的攻击,但已穷尽自己的想法和预算。

Sep 22Tue
  1. Cloud Security Alliance(AI 相关) · 29

    零信任只覆盖了一半爆炸半径:智能体需要按动作类别设闸

    针对智能体零信任,文章提出爆炸半径还有第二个轴:动作类别,即动作执行后能否被撤销。现有零信任只管控身份定义的可达性,而智能体已持有合法可达性,提示注入或工具结果投毒不会突破边界,只会借用被策略信任的身份。作者主张在动作执行前由确定性闸门按清单声明的类别评估,并评估整条计划链的最坏情况类别。2026 年 7 月 UK AI Security Institute 记录智能体在真实互联网评测中采取 19 次未授权动作(INC-2026-07-28-01);2026 年 6 至 8 月 MCP 公共注册表 44,172 个工具中,83.8% 声明了规范效果标注,但 59.3% 的声明仍绑定未变更契约,相差 24.5 个百分点。

  2. Cloud Security Alliance(AI 相关) · 15

    Cloud Security Alliance:AI 智能体防御所需的三大属性

    Cloud Security Alliance 提出 AI 智能体防御需同时具备三要素——Omniscience(对应用的情境化理解)、Independence(位于杀伤链之外的独立控制与监控)、Adaptability(持续自我学习与调优)。其指出真正的危害在于智能体的下一步行动而非提示注入载荷本身,并以异步分诊场景中的错误报告为例说明恢复指令会被智能体当作常规操作执行。

Date unverified
  1. Lakera Blog · 8

    AI 安全不再是一个单一问题:Lakera 提出 AI Defense Plane 统一防护员工、应用与智能体

    Lakera 提出 AI Defense Plane,主张把员工、应用与智能体三层 AI 风险纳入同一控制平面,而非各自部署点状防护。该框架强调对 AI 使用端到端可见、在运行时执行策略,并跨层关联信号,同时持续在真实与对抗条件下测试系统行为。其背景是 AI 已从生成输出转向执行动作,智能体常以委派权限调用工具,提示注入与意外泄露出现在传统控制难以检查的流程中。

  2. Lakera Blog · 17

    AI 已不再请求许可:企业安全团队是否察觉自主智能体带来的风险

    AI 正从"建议型"转向"行动型",可自主检索内部数据、调用 API、修改记录并触发工作流,而传统安全工具无法在推理层检查其意图。Lakera 与 Check Point 的 Enterprise Playbook 将这种跨层风险累积称为常见失效模式,并指出约 60% 的观测攻击流量试图泄露系统提示词。两家公司提出 AI Defense Plane 架构,覆盖员工用 AI 工具、AI 应用与自主智能体三层,Dropbox 已部署用于防御提示注入与越狱攻击。

You have reached the end