行业

黑客利用 abliterated 模型与大量算力对企业基础设施实施复杂攻击

精选理由

一位博主披露黑客已经用去掉安全限制的本地模型加海量算力搞入侵,做安全的和管数据的都该看看。

Gergely Orosz 发推警告:所有持有客户数据的公司都可能成为攻击目标,其中不少会被入侵。他引用了一起真实事件的披露:恶意行为者能够访问 abliterated 模型(即去除安全对齐的本地模型),并拥有大量算力资源,借此对受害公司的基础设施执行高度复杂的攻击。Orosz 呼吁企业学习已公开披露细节的受害者案例,并在业内公开分享信息。该事件表明开放式模型能力正被直接用于企业级网络攻击。

原文 · Gergely Orosz

Every single company with customer data WILL be targeted, and many will be hacked.

The best we can do is learn from those that weee breached AND share details in public. Also:

“the malicious actor had access to abliterated models and substantial compute resources which enabled them to perform highly sophisticated exploits against our infrastructure.”