今日AI安全与工程工具双双爆发:Anthropic 用 Claude 发现密码学算法弱点,OpenAI 则开源了安全 CLI 与发布了 AI 加速治理立场,同时 Grok 和 GitHub Copilot 带来可落地的开发者功能。
过去约 24 小时9 条40 推文信号 强
01大佬官方
Anthropic 利用 Claude 发现密码学算法弱点,并发布基准
- “New Anthropic research: Discovering cryptographic weaknesses with Claude. Claude Mythos Preview has helped our researchers find weaknesses in cryptographic algorithms—the mathematical methods that are used to keep data private.” - “Full technical details of both attacks are provided in our new papers: On HAWK … On AES … And the associated model chain-of-thought for AES.” - “We also worked with academics at ETH Zurich, Tel Aviv University, and the University of Haifa to build CryptanalysisBench, a benchmark for studying LLMs’ cryptanalysis abilities.”
实用点
展示了前沿大模型在密码分析上的实操能力,对安全研究员、密码学开发者以及关心 AI 在非典型领域应用的人有直接启示。CryptanalysisBench 可作为后续评估新模型安全能力的标准。
- “We quietly released the open-source Codex Security CLI, but Hacker News found it before we had a chance to share it here… You can now use it to scan repositories, track findings across runs, verify fixes, and add security checks to CI/CD.” - “Install: npm install @OpenAI/codex-security or npx @OpenAI/codex-security@latest --help”
- “Today we're launching app builder for Grok. It lets you build fully functional apps and publish them instantly, on a unique domain, all from within Grok. Available now on https://t.co/01Y4BOVWIn.”
- “At the core of our mission is working through how to ensure increasingly powerful AI benefits everyone. We believe that, at some point in the future, AI acceleration for frontier model development may be so high that the world will need to pace the rate of AI advancement.” - “We hope to contribute to work led by the U.S. government, alongside other labs and the open-source community, to develop the tools and mechanisms that could make that possible.”
实用点
表明 OpenAI 公开支持政府对前沿模型研发节奏的干预,信号对 AI 政策、开源社区治理、以及企业长期合规规划有参考价值。另有多家机构(如 [15])签署了类似请愿。
- “Coding agents are helping scientists spend more time advancing research, taking on everything from routine maintenance and targeted optimization to complete redesigns and new systems.” - “Across eight case studies spanning industry and academia, we explore what this shift means for scientific computing—and why human verification, stewardship, and long-term maintenance matter.”
GitHub Copilot 扩展企业治理:一处配置,覆盖桌面端、Cloud Agent、CLI 和 VS Code
- “Enterprise managed settings now apply to the GitHub Copilot app and Copilot cloud agent, helping organizations: Define guardrails once across supported Copilot experiences; Control approved plugins and marketplaces centrally; Manage approval-prompt policies for interactive clients; Override local settings with enterprise-managed values.”
实用点
企业可统一管理 Copilot 在不同界面(桌面端、云端 agent、CLI、VS Code)的安全策略,减少影子 AI 风险。对于正在推广 AI 开发工具的企业组织者非常实用。
- “Dairy farming is a complex biological system driven by unpredictable market forces. See how Michigan farmer Paul Windemuller built 'The Farm Brain' with Gemini 3.6 Flash inside Google @Antigravity — a local, multi-agent AI system that automates daily performance tracking to help manage his farm.”
OpenAI 启动 Student Collective:面向本科生的 Campus Lead 项目
- “We're opening applications for the OpenAI Student Collective—a program for undergraduate Campus Leads bringing AI innovation to their campuses. Campus Leads will work directly with OpenAI and receive hands-on training, funding, credits, swag, and access to a global community of peers.”
实用点
学生可申请成为校园大使,获得资源与培训,适合想在高校推动 AI 工具和生态的同学。对社区贡献者也是一种参与方式。