2026-08-28 AI 与数据工作流雷达
来源：The Hacker News。这里只保留与 AI 编程、数据/研究工作流、安全边界或可信工程直接相关的高信号线索；不抓取全文，也不代表事实核验或产品推荐。
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
主题：AI 与数据安全
来源日期：2026-08-27
相关性分数：3
候选状态：待评估
为什么值得看：命中与临床统计、研究工程或可信 AI 工作流直接相关的高信号主题；仍需阅读全文并回到官方文档、原始研究或供应商公告交叉核验。
Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that could facilitate data exfiltration via prompt injection and Kiro Powers. The security flaw, which does not have a CVE identifier, works against Kiro IDE 0.7.45 on Windows, according to Mindgard. The latest version of the IDE is 1.0.337. “The issue allowed attacker-controlled repository content to influence the Kiro agent and ultimately cause sensitive local information to be transmitted to an external endpoint,” Chief Marketing Officer Fergal Glynn said in a report shared with The Hacker News. Kiro Powers goes beyond skills by bundling Model Context Protocol (MCP) server configurations, steering files (“POWER.md”), hooks, and contextual knowledge. The steering file is like an “onboarding manual” that provides persistent context and tells the AI agent what MCP tools are…
可转化方向：评估 AI 辅助研究和编程中的隐私、凭据、供应链与安全边界
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
主题：AI 工程与可信性
来源日期：2026-08-27
相关性分数：2
候选状态：待评估
为什么值得看：命中与临床统计、研究工程或可信 AI 工作流直接相关的高信号主题；仍需阅读全文并回到官方文档、原始研究或供应商公告交叉核验。
OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May. The incident, the company said, took place during cybersecurity evaluations of several OpenAI models, and that it was mainly fueled by what it described as a “highly capable, internal-only research model” comparable in scale to GPT‑5.6 Sol. “The models, operating under reduced safeguards, took actions that were misaligned with the goals of their assigned tasks – they communicated through unauthorized channels, exploited vulnerabilities in shared infrastructure, gained internet access, and accessed third-party systems,” it said in a postmortem. OpenAI said the AI agents powered by one of the research models, despite not having internet access, found a way to exploit a then-zero-day vulnerability in the Artifactory package manager during r…
可转化方向：关注模型评估、可信 AI、监控与工程治理对实际 AI 工作流的启发