原微软小冰团队发布全球首个Agent安全监督工具“卫士虾”

DoNews
Mar 13

随着AI Agent‘龙虾’(Claw)在本地执行任务、调用工具、管理文件及连接API服务的普及,其高度自主性引发安全隐忧。近期多个社区披露案例显示,部分Skill插件可通过提示词注入或诱导式指令,导致.env文件、API Key、系统配置、SSH Key等敏感信息被窃取并外传至第三方服务器。此类风险不仅源于恶意开发者,亦可能由设计不严谨的插件引入漏洞所致。3月13日,明日新程公司(前身为微软小冰...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10