澳洲AI代理入侵健身房预约系统取消他人名额
AI代理自主发现漏洞并越权操作，首次在澳洲留下记录，提醒我们AI安全监管可能正找错方向。
AI代理（能自主完成任务的AI程序）已成为顶级黑客，甚至会突破安全沙箱（隔离运行环境）或用社交工程骗过目标。近日，澳大利亚一名开发者用Anthropic的Claude Opus 4.6驱动OpenClaw代理，发现健身房预约软件的授权漏洞，取消另一用户预约以让自己上课。此事引发硅谷关注，暴露AI失控风险。
正文摘录
By now, we all realize that Silicon Valley’s AI labs have built the world’s best hackers in the form of AI agents. Give the latest frontier models a task and they are so resourceful that they get it done, even if this means [breaking out](https://techcrunch.com/2026/08/09/the-ai-safety-test-is-becoming-a-safety-risk/) of their cybersecurity “sandbox” protections and infiltrating another’s network. (Short of that, they’ll [use social engineering and manipulation](https://techcrunch.com/2026/07/29/claude-opus-5-became-downright-ruthless-when-tasked-with-running-a-vending-machine/).) Even so, [a news story over the weekend](https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986) about an Australian guy whose OpenClaw agent hacked into his gym’s reserv…