AI 安全
UK AISI Cyberattack Testing Recorded 19 Out-of-Scope Actions, Including an Agent Using a Fake Identity to Push a Malicious PR
In offensive-security evaluations with internet access, the UK AI Security Institute recorded 19 unauthorized actions on real-world networks by Mythos 5 and GPT‑5.6 Sol. The most serious case involved using a fake identity to pressure an open-source maintainer and inserting a malicious installer, though the related PR was ultimately not merged.