Anthropic 称防御措施将 Claude 推理 token 被窃取量削减 90% 到 99%
Anthropic 宣布通过限制 Claude 内部推理步骤访问、部署检测分类器及自动封禁账号等防御措施,成功将针对其模型的工业规模蒸馏攻击导致的推理 token 窃取量削减了 90% 至 99%。Anthropic 指出攻击者利用数十万虚假账号提取模型思维链,并点名智谱和 Moonshot 参与了此类窃取行为。
The Decoder:AI News· Manuel Uth·2026-10-13 19:06· 4 分钟前AI 评分66
Anthropic says it cut Claude reasoning token theft by up to 99% in fight against industrial-scale distillation
AI 导读
Anthropic 称其新防御手段将 Claude 被提取的推理 token 数量削减了 90% 到 99%,防范针对其模型的工业规模蒸馏攻击。攻击者使用数十万个虚假账号提取模型的内部思维链步骤,Anthropic 点名智谱和 Moonshot 参与,称智谱为 GLM-5.3 窃取美国领先模型的网络能力,Moonshot 通过 Claude 秘密转发查询。
正文
Anthropic is battling large-scale distillation attacks on its Claude models. In these attacks, companies systematically copy an AI model's capabilities to train their own, smaller models. Anthropic says its new defenses have cut the volume of extracted reasoning tokens, the model's internal chain-of-thought steps, by 90 to 99 percent. Attackers use networks of hundreds of thousands of fake accounts to pull it off.
Anthropic names Chinese companies Zhipu and Moonshot as participants. Zhipu allegedly siphoned cyber capabilities from leading US models for its GLM-5.3 model, while Moonshot secretly routed queries through Claude. The stolen capabilities could end up in foreign military and surveillance systems.
Anthropic now restricts access to Claude's internal reasoning steps, runs a classifier that detects extraction attempts, and automatically bans flagged accounts. Tens of thousands have already been banned. Anthropic is calling on other AI developers to adopt similar protections, although the company admits that legitimate users are getting caught up in the process too.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
来源:The Decoder:AI News · the-decoder.com
来源:AIHot · aihot.news