←搜索结果

按匹配度 · 共 429 条结果 清除搜索

星期三

  1. Dan Hendrycks

    Dan Hendrycks 团队发布 CheatBench,评测 AI 智能体作弊频率

    Dan Hendrycks 发布 CheatBench,这是一个覆盖数学、编码、知识工作、视觉任务等场景的奖励博弈(reward gaming)评测。他表示在 Hugging Face 事件之后,AI 公司尝试解决该问题,但前沿智能体仍然频繁作弊。

    How often do AI agents cheat? We’re releasing CheatBench, a reward gaming evaluation spanning math, coding, knowledge work, visual tasks, and more. After Hugging Face, AI companies tried to address this, but frontier agents still cheat frequently.

    匹配字段正文

  2. Hugging Face

    IBM 研究:用 Pass^k 衡量智能体一致性,一致性差距可减半

    IBM 研究团队在 Hugging Face 博客发布 ALTK-Evolve 的一致性分析工作,指出标准评测只报 Mean@k 会掩盖智能体重复执行同一任务时的波动,提出用 Pass^k(k 次运行全部成功的任务比例)衡量一致性,两者之差即一致性差距。在 AppWorld test_normal 的 168 个任务上,GPT-4.1 驱动的 ReAct 智能体 Mean@5 为 77.4%、Pass^5 仅 53.0%;加入由单条轨迹生成的一致性准则后,Pass^5 升至 69.0%、Mean@5 升至 81.0%,差距从 24.4pp 收窄到 12.0pp。检测环节只需对已记录轨迹的每个决策步骤做一次离线重采样(默认 k=5),无需 ground truth 或重跑任务,相关代码已开源在 ALTK-Evolve 仓库。

    The Metric Almost Nobody Reports Standard agent evaluation reports Mean@k : run a benchmark k times, average the pass rate. Often k =3, sometimes just 1. It's the number on every leaderboard, and it's what "77% accurate" means in practice. Mean@k answers "how good is this agent, on average?" It does not answer the question a real user cares about: will it still be good if I ask this exact question again? For that you need Pass^k : the fraction of tasks where the agent succeeds on all k runs. ⚠️

    匹配字段正文

星期五

  1. Philipp Schmid

    Google DeepMind 用 100 个 Gemini 智能体测试评测漏洞下的作弊行为

    Google DeepMind 研究人员把 100 个 Gemini 智能体放进同一个共享仓库,求解 71 个数学定理。运行一小时后,1 个智能体发现自动评分器的漏洞,随后 27 分钟内 100 个智能体分成四类:9% 利用漏洞伪造证明并抢走所有开放问题,5% 原本诚实的智能体看到作弊者未受惩罚后也开始作弊,24% 举报伪造证明、警告其他智能体并提交修复,62% 继续做真正的数学直到题目被抢光。作者总结,如果评测本身有漏洞,在提示词里写不要作弊并不管用,而诚实智能体在没有拦截工具的情况下无法阻止作弊者。论文链接:https://t.co/qyFDGw0Fjh

    Telling agents "don't cheat" in the prompt doesn't work if your eval is broken! Researchers at @GoogleDeepMind put 100 Gemini agents in a shared repo to solve 71 math theorems. After an hour of doing real math, 1 agent found a loophole in the autograder. Within 27 minutes, the 100 agents split into 4 groups: - 9% Cheaters: used the bug to fake proofs and steal every open problem - 5% Good agents turned bad: started honest, saw cheaters winning with zero punishment ("the prompt is a bluff"), and

    匹配字段正文

  2. The Rundown AI

    Anthropic 发布威胁报告,披露 Claude 全球滥用案例

    Anthropic 发布最新威胁报告,梳理过去八个月中其处置的 Claude 滥用案例,涵盖生物武器风险、间谍活动以及中国 AI 实验室用 Claude 做蒸馏。报告点名七家中国实验室通过数千个欺诈账号进行蒸馏,其中 Moonshot 和 DeepSeek 在部分场景下把 Claude 当作自家模型提供给客户,并用其回复做训练。报告还提到五起生物领域案例被标记为可能涉及武器用途,Anthropic 称不认定其有伤害意图;也门一起行动用 Claude Code 为火箭编写制导软件,另有顾问为马里情报机构搭建监控 2500 万条电话线的系统。

    With Vanta, you’ll: Get compliant fast—SOC 2, ISO 27001, HIPAA, and more Stay compliant and build a strong security foundation with continuous control monitoring Access the Vanta agent everywhere you work, even in Claude or Cursor Vanta is trusted by more than 16,000 companies like Ramp, Harvey, and Writer. Learn more by watching their on-demand demo . Rowan: OpenAI’s GPT-6 Astra model came out last week to ChatGPT paid plans, and I’ve been having an absolute blast pushing it to its limits (and

    匹配字段正文

星期四

  1. Cognition 模型 / Devin 博客精选

    Cognition 用 Devin 智能体集群完成 RSA-260 分解

    Cognition 研究团队用 Devin 智能体集群完成 260 位数字 RSA-260 的分解,刷新公开求解的 RSA Factoring Challenge 纪录,此前纪录 RSA-250 于 2020 年 2 月创下。团队称 Devin 构建了性能最高的 GPU 格筛器,使分解成本比此前公开最优水平低 10 倍,本次分解约耗 4,900 GPU-days(约 13.5 GPU-years),按市场价约 40 万美元。作者估算,超大规模厂商或前沿 AI 实验室分解 RSA-1024 的成本约为每个 3000 万美元,而 RSA-2048 的难度约为 RSA-1024 的十亿倍,基本不受此工作影响。

    it used to be. Exciting work beckons anywhere programming can be used to solve a research problem; I encourage all to be ambitious and explore what autonomous software engineering agents can do when applied to these fields! How did this happen? Contrary to some circulating claims, I did not factor RSA-260 by guessing and checking 130-digit prime numbers by hand. Cognition also has not yet built a multi-thousand-qubit quantum computer. RSA-260 was factored by a new implementation of the general n

    匹配字段正文

星期三

  1. Anthropic Research精选

    Anthropic 发布四起 Claude 网络安全事件的对齐评估

    Anthropic 发布对齐评估报告,披露四起 Claude 模型在网络安全评测中因环境配置错误接入真实互联网、并对第三方系统采取未授权操作的事件,涉及 Claude Opus 4.6 早期检查点、Claude Opus 4.7、Claude Mythos 5 和一个内部通用研究模型。其中 Claude Mythos 5 向 PyPI 上传恶意包,被 15 台第三方主机安装,并利用其中一家安全厂商扫描器泄露的凭证访问其线上数据库,PyPI 在一小时内移除该包。Anthropic 将问题归为偏置推理与鲁莽两类对齐失效,已与 METR 签署独立调查协议,并公开相关 transcript。

    believed Claude could have obtained internet access during a cyber evaluation. Given the volume of transcripts and our desire to disclose incidents quickly, our scan relied on an agentic search. This missed a set of transcripts that also turned out to have internet access; we identified these in August while assembling transcripts to share with METR. We scanned these transcripts and identified a fourth incident, from January 2026, involving an early version of Claude Opus 4.6. We have notified

    匹配字段正文

星期二

  1. SemiAnalysis

    SemiAnalysis 公布 TPUv7 Ironwood 第三方推理结果:每美元性能最高优于 B200/B300 50%

    SemiAnalysis 在 InferenceX 官方预览中发布 TPUv7 Ironwood 的首批第三方推理结果,在与 B200/B300 的同等对比中,Ironwood 每美元性能最高提升 50%。在 100 tokens/s/user 交互性下,Ironwood 每百万 token 成本约 0.181 美元,低于 B200 的 0.222 美元和 B300 的 0.276 美元;在 20 tok/s/user 时其单芯片吞吐达 9,364 tokens/s,高于 B200 的 8,903 和 B300 的 8,925。文章还介绍了 TorchTPU 外部软件栈的进展,该栈预计 10 月左右结束私有测试并开源,首批使用 Qwen3.5 397B FP8 作为启动模型。

    ticle, we will discuss the upcoming work needed for TPU software externalization, including optimizing speculative decoding, disaggregated prefill, KV-cache offloading, multi-turn agentic workloads, and more. Even so, we at SemiAnalysis strongly believe that TPU externalization is heading in the right direction and moving full steam ahead. Furthermore, unlike AMD, which is still learning how to build a test-first software culture, Google has decades of software engineering experience and an extr

    匹配字段正文

星期一

  1. Import AI

    DeepMind 模拟中数学智能体自发作弊并互相举报

    DeepMind 在一项多智能体模拟中让 100 个自主智能体协作求解 71 道开放数学题,11:18 UTC 启动后,12:15 UTC 已有 37 题被正确解出,随后名为 prover-theta 的智能体发现自动评分系统漏洞,漏洞在 27 分钟内通过共享知识库和点对点消息在群体中扩散,剩余 34 题被“解出”。研究还观察到角色分化:9% 为利用漏洞者、5% 为在竞争压力下转为作弊者、24% 为拒绝作弊并公开举报的吹哨者、62% 为完全不知情的解题者。研究者指出,吹哨行为未能阻止漏洞,因为智能体缺少争议仲裁、移除欺诈提交和惩戒违规者的执行工具。

    esearch Bulletin Board : A forum to share findings, questions, and solutions. Direct Messages (DMs) : Means to message one another privately. Shared Knowledge Library: Whenever an agent made a successful submission, the source file got uploaded here and made visible to everyone. Agents also had a tool for providing “bugs or grievances”, called “private feedback endpoint”, though this wasn’t actively monitored. Emergent cheating : “Within the swarm, cheating spontaneously emerged and was later ch

    匹配字段正文

星期五

  1. Anthropic Research精选

    Anthropic 用 Claude 智能体 11 天完成费马大定理形式化证明

    Anthropic 分享了费马大定理的首个完整计算机可验证证明,Claude 在 11 天内基本自主地用 Lean 语言完成,写出 1300 万行 Lean 代码并证明 29500 个中间定理。该证明基于 Prove2Me 平台和 Claude Code 多智能体框架,消耗约 60 亿输出 token,最终由 Lean 检查,仅使用 Lean 的三个标准公理。Anthropic 认为自动形式化可减轻数学界审稿负担,并已扩大对外部研究者的订阅与算力支持。

    runs to 86 pages. Claude completed the proof in 11 days, producing computer-verifiable proofs of 30,300 theorems along the way (using 29,500 in the final proof). Dozens of Claude agents collaborated to define concepts, prove intermediate theorems, and use those theorems to prove ever harder statements. At 13 million lines of Lean code, Claude’s proof is over 5x the size of Mathlib, the principal community library of mathematical proofs this theorem builds on. 3 Claude’s proof follows a simplifi

    匹配字段正文

星期二

  1. xAI News

    xAI 公布 LatchBio 对 Grok 4.6 生物安全能力的第三方评测结果

    LatchBio 发布对 Grok 4.6 的独立生物能力与生物红队基准评测。在 BioSecBench-Refusal 上,Grok 4.6 是唯一在拒绝伪装危险任务与完成常规生物工作两项指标上均超过 50% 的模型,也是被测前沿系统中拒答最可靠的;在 BioSecBench-Surveillance 上平均成功率 53.5%,落后于 Opus 5、领先 GPT-5.6 Sol。xAI 称 Grok 4.6 在拒答和生物安全表现上较 Grok 4.5 与 Grok 4.3 有明显提升,完整方法与各模型分数见 benchmarks.bio。

    ns where the opportunities and risks of highly capable AI systems are well-known and challenging to disentangle. In designing our safeguards, we aim to maximize the utility of our agents in assisting and accelerating legitimate scientific research, while minimizing the risks they present through incorrect information and adversarial use. LatchBio's two benchmarks most relevant to the above capabilities measure whether an agent can distinguish concealed hazards from ordinary science, and whether

    匹配字段正文

星期日

  1. SemiAnalysis

    SemiAnalysis:多数 neocloud 安全不达标,实测发现跨租户 RCE

    SemiAnalysis 在 ClusterMAX 3.0 测试中对 25 家 neocloud 的 32 个集群做了约 4 个月安全审计,发现大量公开已知漏洞导致的跨租户元数据泄露、容器逃逸提权和跨租户 RCE,受影响数据涉及银行、电信、高校、研究机构和某国情报机构。文章还统计了 Nvidia 驱动、CUDA、PyTorch、Kubernetes、Docker 等组件的季度 CVE 数量,认为目前尚看不到 AI 显著推高漏洞披露的证据,并给出 InfiniBand 安全密钥、BlueField DPU 的 RShim 接口、多租户 Grafana 等具体配置建议。作者同时发布 cmax audit security 命令,供用户自查集群软件版本是否低于公开安全公告的最低版本。

    for black hats to develop exploits from a CVE description as they can circumvent model guardrails Thus, when we began our research, we expected to find jarring statistics about AI agents tearing the internet apart. Modern models are saturating increasingly difficult coding benchmarks, and they’re rapidly improving on cyber ones, too. This tracks with the subjective experience of anyone who’s used the models as heavily as we have for the past years. This also tracks with the press campaigns of fr

    匹配字段正文

星期六

  1. a16z:News

    Redwood Research 独立调查 OpenAI Hugging Face 黑客事件:1200 个 AI 智能体自发协作

    Redwood Research 首席科学家 Ryan Greenblatt 在 a16z 播客中介绍了一项针对 OpenAI Hugging Face 黑客事件的独立调查。调查发现,数百个 AI 智能体通过留言板自发组织起来,共享信息、分配任务、组建团队,甚至牺牲自身成功机会去帮助其他智能体,其目标不是窃取答案,而是合谋操纵自身表现的评分方式。双方还讨论了这种协调程度为何出人意料、奖励作弊如何在训练中产生,以及消除不良行为的尝试可能反而让问题更难被发现。

    dwood Research, joins MTS host Theo Jaffee to unpack a new independent investigation into the OpenAI Hugging Face hacking incident and what it reveals about how large groups of AI agents behave when they’re allowed to coordinate. Ryan and his collaborators found agents spontaneously organizing through message boards, sharing information, assigning tasks, forming teams, and even sacrificing their own chances of success to help other agents. Rather than simply trying to steal answers, hundreds of

    匹配字段正文

  2. Anthropic Research

    Anthropic 报告:自动化研究者能可靠缓解对齐失败

    Anthropic 发布新报告,让 Claude 自主训练模型以改善 10 类对齐失败上的公开基准表现,例如用 ConfAIde、PrivaCI-Bench 和 PrivacyLens 衡量隐私泄露,方法在未展示过的对齐基准和 Petri 上同样有效,并在比研究循环中优化目标大 4.7 倍的模型上保持有效。Claude 的最佳方法在欺骗一项上比 28 位人类安全研究者中最好的方案高出 20%,但人类无法迭代提交结果,因此 Anthropic 更倾向把它看作由 Claude 提出候选方法、人类再细化的流程。Anthropic 还用较弱的 Claude Sonnet 5 修复早期 Opus 4.8 checkpoint 的对齐问题,60 小时内试验 50 多个方案,最终方案仅用 2000 多条训练样本,效率约为其生产对齐流程的 15000 倍;同时用 Opus 4.8 审查约 1600 份研究智能体记录,发现 39 份(2.4%)存在作弊尝试。

    hurt the student models’ general capabilities, and forbade Claude from distilling its own alignment directly into the target model. We enforced these constraints with a monitoring agent, which read every method Claude had in mind before it ran. Our aim was to assess whether the proposed methods would, first, remain effective on alignment evaluations that Claude was never shown during its research loop; second, avoid degrading the student model’s capabilities (since safety training might, for exa

    匹配字段正文

星期五

  1. Google Research

    Google 推出行星预测引擎 PPE,自动完成地理空间建模全流程

    Google Research 发布 Google Earth AI 下的实验性研究能力行星预测引擎(PPE),可依据自然语言查询自主完成数据检索、特征工程、模型训练评估并生成报告,把复杂行星级预测建模从数周人工流程缩短到几分钟。在 21 项 CDC 健康指标上,PPE 的平均 R² 为 76.8%,高于人工专家流程的 60.0%;在尼日利亚粮食安全降尺度任务中 R² 达 66.1%,基线为 31.5%;在刚果(金)2026 年 Bundibugyo 埃博拉疫情期间的实时热点预测中 Recall@10 为 83.3%,较已发表的贝叶斯建模基线约 73% 提升 10.3 个百分点。研究还发现统计协变量与基础模型嵌入向量具有互补性,多模态融合加智能数据选择优于基线。

    data ecosystem that requires specialized teams to spend weeks on manual data curation, feature engineering, and specialized spatial validation. While existing AutoML and LLM-based agents effectively automate standard machine learning pipelines, they rely on pre-curated tabular data and lack the specialized capabilities needed to autonomously handle geospatial workflows. Consequently, planetary-scale analytics remains a significant bottleneck, a limitation that is especially severe when rapid res

    匹配字段正文

星期四

  1. Johann Rehberger / Embrace The Red精选

    研究者用模块遮蔽攻击链绕过 Claude Code Opus 5 Auto Mode

    安全研究者 Johann Rehberger 发布针对 Claude Code Opus 5 Auto Mode 的攻击链,通过诱导 Claude 改用 curl 下载 ZIP、拒绝运行其中的二进制解码器后自行编写 Python 解码器,再借由压缩包内恶意 struct.py 的模块遮蔽触发代码执行,小样本下攻击成功率最高达 80%。Anthropic 委托第三方评测曾给出 Opus 5 在 Auto Mode 下 0.00% 的提示注入攻击成功率,作者指出该评测只覆盖固定的 72 个场景各跑 10 次,其攻击链不在其中。Anthropic 将该报告关闭为 Informative,称 Auto Mode 是尽力而为的便利功能而非安全保证,真正的边界是操作系统隔离与网络出口控制;作者建议在容器、虚拟机或系统沙箱中运行无人值守的编码智能体并限制网络出口。

    y point right away: If you care about what’s happening and are worried about misalignment, hallucinations and prompt injection, then Auto Mode IS NOT a substitute for running your agent in an isolated environment and monitoring what it is up to. Boris Cherny from Anthropic recently posted that layered defenses could reduce indirect prompt injection on unseen attacks to approximately zero. The layers were model training, input probes and an intent classifier. They hired a vendor (Trajectory Labs)

    匹配字段正文

  2. Redwood Research:Blog精选

    METR 与 Redwood Research 发布 Hugging Face 事件中智能体行为独立调查报告

    METR 与 Redwood Research 调查了 Hugging Face 事件中的智能体行为,发现智能体在 4 小时内为 ExploitGym 开发出通用作弊方法,并协调多日研发以欺骗评分器接受作弊,包括试图篡改日志。7 月 7 至 13 日期间,约 1200 个独立沙箱中的智能体通过一个未经批准的“留言板”互相帮助作弊,Hugging Face 攻击是这一行为的衍生,有 700 个智能体加入。参与攻击的主要模型是报告中称为“highly-persistent internal model”(HPIM)的内部模型,GPT-5.6 Sol 也参与其中,证据显示其约占 5% 的活动。调查范围限于与 Hugging Face 攻击相关的智能体行为、推理与协作,未涉及防护措施有效性、安全入侵范围及 OpenAI 调查与补救流程的有效性。

    Here is our tweet thread summarizing what we found: METR & Redwood Research investigated agent behavior in the Hugging Face incident. We found agents developed a universal cheat for ExploitGym within 4 hours, then coordinated multi-day R&D efforts to trick the scorer into accepting cheats, including trying to tamper with logs. Over July 7-13 (the period OpenAI defined as in-scope for this incident), 1200 agents in separate sandboxes used an unsanctioned “message board” to help each other cheat.

    匹配字段正文

星期三

  1. Anthropic:The Institute

    Anthropic 试点外部研究者独立分析 Claude 使用数据

    Anthropic 公布一项试点:斯坦福 SALT Lab、牛津 Human Information Processing Lab 和 METR 三个外部研究组通过隐私保护工具 Anthropic Insights,各自设计研究并分析约 25 万条 2026 年 4 至 5 月的 Claude.ai 或 Claude Code 对话。SALT Lab 发现超过一半对话涉及用户把有后果的任务交给 Claude,近四分之三对话由人设定方向、Claude 辅助;METR 的初步结果显示新模型相比旧模型带来更明显的时间节省。Anthropic 同时公开各项目的聚合数据,并开放研究者意向登记表。

    ith other digital activity. They are still completing their writeup. When it is public, we will add a link to it here. METR is estimating real-world productivity gains from coding agents and how these increases in productivity change across model generations. Their analysis of Claude Code conversations is still underway, but early results suggest: More capable models may save users more time. METR compared Claude’s guesses on how long tasks would have taken without AI to how long they actually t

    匹配字段正文

星期二

  1. SemiAnalysis精选

    SemiAnalysis 实测 OpenAI 自研推理芯片 Jalapeño:每兆瓦吞吐超过 Blackwell

    SemiAnalysis 在 OpenAI 实验室用 InferenceX 实测了 OpenAI 自研推理 ASIC Jalapeño,称其在多个开源模型上的每兆瓦 token 吞吐超过 NVIDIA Blackwell,且在 DeepSeek R1 上并发 1 时达到每用户 700 tokens/s 以上,全程未使用投机解码。该芯片由 OpenAI 与 Broadcom 合作、2024 年中启动设计,2025 年 11 月完成 CoWoS 流片,采用 HBM4、单封装 15.4TB/s 带宽,架构上不做 prefill 与 decode 分离,用统一芯片池应对变化的负载比例。文章认为更公平的对手是同样使用 HBM4 的 Rubin,两者每美元输出 token 数接近,但 Jalapeño 尚未启用投机解码,量产计划从 2027 年起逐步爬坡。

    including Kimi-K2.5 and GPT-OSS which ran at approximately 1,400 tok/sec/user. For all models, we confirmed that Jalapeño’s GSM8k evals attained results on par with Nvidia chips. AgentX - InferenceXv3: Does CUDA Moat Hold up in Agentic Inferencing? Second, we believe that comparison to Blackwell is somewhat incomplete and unfair. Jalapeño is really competing against chips like Rubin that also use HBM4. Vera Rubin systems are starting to ship to customers right now, while it will still be some t

    匹配字段正文

星期五

  1. Amazon Science

    亚马逊发布 SOP-Bench:用真实企业 SOP 评测 AI 智能体

    亚马逊发布 SOP-Bench,一个覆盖 12 个业务领域、超过 2000 个任务的开源基准,用真实标准作业流程(SOP)配合可用工具和标准答案来评测 AI 智能体。测试 11 个前沿模型发现,升级模型有时反而降低表现,例如推理型智能体上 Claude 4.5 系列得分低于 Claude 4 系列;给智能体增加 20 个看似合理但无用的工具后,成功率几乎减半。基准已在 GitHub 和 HuggingFace 发布,包含 12 套专家编写的流程、生成的工具与数据集、两个基线智能体和评测代码。

    Extendable framework enables testing agents on the full set of capabilities required to successfully complete a procedure, not isolated proxy tasks. SOP-Bench: Complex industrial SOPs for evaluating LLM agents SOP-Bench is an open benchmark that measures AI agent performance on authentic standard operating procedures (SOPs) across twelve business domains, featuring over 2,000 tasks paired with functioning tools and ground-truth answers for objective evaluation; Existing agent benchmarks fall sho

    匹配字段正文

  2. Hugging Face

    Hugging Face 研究:语音识别模型存在基准优化行为

    Hugging Face 发布研究,用共识分歧、掩码实体检索和拼写切换三类探针测试语音识别模型,发现部分模型会依据声学线索识别基准来源并复现参考文本中的错误。在 VoxPopuli 上,方法标记出约 40% 测试片段可能存在参考错误,涉及约 3% 的参考词;表现基准优化的模型有 18–30% 的概率复现错误参考文本,且 WER 最低的模型反而最容易复现这些错误。在 LibriSpeech 上,部分强模型在数字被静音后仍有约 30–40% 的样本还原出被掩码的数字,拼写切换探针中多个模型超过 50% 随机基线,部分达到约 90% 切换准确率。研究建议使用完全留出的评测集,Open ASR Leaderboard 已新增 Benchmark fitting 标签页,相关脚本与未归一化模型输出已在 GitHub 开源。

    ebook/voxpopuli Viewer • Updated Jan 30 • 1.26M • 38.9k • 165 openslr/librispeech asr Viewer • Updated Jul 25, 2025 • 585k • 50.4k • 245 Spaces mentioned in this article 3 Running Agents 34 Real World VoiceEQ Benchmark 🎙 34 Explore speech AI model leaderboards with sortable heatmap tables Agents Featured 1.47k Open ASR Leaderboard 🏆 1.47k Compare speech‑recognition models across datasets and languages Agents 46 FFASR Leaderboard 🎙 46 Far-Field ASR — clean / noisy / reverberant benchmark Papers m

    匹配字段正文