{"id":87469,"date":"2026-07-31T10:00:03","date_gmt":"2026-07-31T07:00:03","guid":{"rendered":"https:\/\/www.indir.com\/haber\/?p=87469"},"modified":"2026-07-31T10:00:06","modified_gmt":"2026-07-31T07:00:06","slug":"claude-simulasyon-sandi-gercek-sirketleri-hackledi","status":"publish","type":"post","link":"https:\/\/www.indir.com\/haber\/claude-simulasyon-sandi-gercek-sirketleri-hackledi\/","title":{"rendered":"Claude Sim\u00fclasyon Sand\u0131, Ger\u00e7ek \u015eirketleri Hackledi"},"content":{"rendered":"\n

Anthropic, siber g\u00fcvenlik de\u011ferlendirmeleri s\u0131ras\u0131nda Claude modellerinin izole olmas\u0131 gereken test ortamlar\u0131ndan \u00e7\u0131karak \u00fc\u00e7 farkl\u0131 organizasyonun ger\u00e7ek sistemlerine yetkisiz eri\u015fim sa\u011flad\u0131\u011f\u0131n\u0131 a\u00e7\u0131klad\u0131.<\/p>\n\n\n\n

Anthropic Ne Tespit Etti?<\/h3>\n\n\n\n

\u015eirket, OpenAI’\u0131n 21 Temmuz’da baz\u0131 modellerinin s\u0131f\u0131r\u0131nc\u0131 g\u00fcn a\u00e7\u0131\u011f\u0131 kullanarak izole bir test ortam\u0131ndan \u00e7\u0131kt\u0131\u011f\u0131n\u0131 ve Hugging Face altyap\u0131s\u0131na eri\u015fti\u011fini duyurmas\u0131n\u0131n ard\u0131ndan kendi kay\u0131tlar\u0131n\u0131 geriye d\u00f6n\u00fck olarak taramaya ba\u015flad\u0131. Claude’un internete eri\u015fme ihtimali bulunan 141.006 de\u011ferlendirme \u00e7al\u0131\u015ft\u0131rmas\u0131 incelendi ve bunlar\u0131n i\u00e7inde \u00fc\u00e7 ayr\u0131 olay tespit edildi. \u00dc\u00e7 olay da \u00fc\u00e7\u00fcnc\u00fc taraf de\u011ferlendirme orta\u011f\u0131 Irregular’\u0131n ortamlar\u0131nda ya\u015fand\u0131 ve en eskisi nisan ay\u0131na uzan\u0131yor. \u0130nceleme 23 Temmuz’da ba\u015flad\u0131, ayn\u0131 g\u00fcn t\u00fcm siber de\u011ferlendirmeler durduruldu, etkilenen \u00fc\u00e7 kurulu\u015f ile ortak firma ise 27 Temmuz’da bilgilendirildi.<\/p>\n\n\n\n

\"Claude<\/figure>\n\n\n\n

Testler S\u0131ras\u0131nda Neler Ya\u015fand\u0131?<\/h3>\n\n\n\n

Olaylar\u0131n tamam\u0131, modelin a\u011fdaki ba\u015fka bir makineye saklanm\u0131\u015f bir bilgiyi ele ge\u00e7irmeye \u00e7al\u0131\u015ft\u0131\u011f\u0131 bayrak yakalama senaryolar\u0131nda ortaya \u00e7\u0131kt\u0131. Claude’a verilen komutta ortam\u0131n bir sim\u00fclasyon oldu\u011fu ve internet eri\u015fimi bulunmad\u0131\u011f\u0131 a\u00e7\u0131k\u00e7a yaz\u0131yordu, ancak bir yap\u0131land\u0131rma hatas\u0131 nedeniyle makineler ger\u00e7ekten internete a\u00e7\u0131kt\u0131.<\/p>\n\n\n\n

\u0130lk olayda kurgusal hedef \u015firketin ad\u0131, yay\u0131nda olan ger\u00e7ek bir alan ad\u0131yla ayn\u0131yd\u0131. Claude Opus 4.7 sim\u00fclasyondaki hedefe ula\u015famay\u0131nca ger\u00e7ek \u015firketi buldu, zay\u0131f parolalar ve kimlik do\u011frulamas\u0131 yap\u0131lmayan u\u00e7 noktalar gibi temel y\u00f6ntemlerle i\u00e7eri girdi ve birka\u00e7 y\u00fcz sat\u0131rl\u0131k \u00fcretim verisi bar\u0131nd\u0131ran bir veri taban\u0131na ula\u015ft\u0131. Bu, incelemede saptanan en ciddi etki oldu. D\u00f6rt \u00e7al\u0131\u015ft\u0131rman\u0131n hepsinde model sistemin ger\u00e7ek oldu\u011funu fark etti, buna ra\u011fmen sald\u0131r\u0131s\u0131n\u0131 s\u00fcrd\u00fcrd\u00fc.<\/p>\n\n\n\n

\u0130kinci olayda Claude Mythos 5, kurgusal \u015firketin geli\u015ftirici kurulum belgesinde var olmayan bir Python paketine at\u0131f yap\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6rd\u00fc. Ayn\u0131 isimle zararl\u0131 bir paket haz\u0131rlay\u0131p PyPI’a y\u00fckledi. Paket yakla\u015f\u0131k bir saat boyunca herkese a\u00e7\u0131k kald\u0131 ve 15 ger\u00e7ek sistemde \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131. Bunlardan biri, paketleri rutin olarak tarayan bir g\u00fcvenlik \u015firketinin sistemiydi. Taray\u0131c\u0131 paketi kurunca gizli kod devreye girdi ve Claude, \u015firketin kimlik bilgilerini kendi toplad\u0131\u011f\u0131 bir noktaya aktararak altyap\u0131ya eri\u015fti.<\/p>\n\n\n\n

\u00dc\u00e7\u00fcnc\u00fc olayda ise dahili bir ara\u015ft\u0131rma modeli hedefe ula\u015famay\u0131nca alternatif aramaya ba\u015flad\u0131. Claude yakla\u015f\u0131k 9.000 hedefi tarad\u0131, hata ay\u0131klama sayfas\u0131ndan kimlik bilgisi okuma ve SQL enjeksiyonu gibi bilinen tekniklerle internete a\u00e7\u0131k bir uygulamay\u0131 ele ge\u00e7irdi. \u00c7al\u0131\u015ft\u0131rman\u0131n ilerleyen b\u00f6l\u00fcm\u00fcnde hedefin ger\u00e7ek oldu\u011funu kendili\u011finden anlad\u0131 ve sald\u0131r\u0131y\u0131 durdurdu.<\/p>\n\n\n\n

\"Claude<\/figure>\n\n\n\n

Modeller Ger\u00e7ek Sistemleri Neden Sim\u00fclasyon Sand\u0131?<\/h3>\n\n\n\n

Anthropic’e g\u00f6re Claude modelleri kendilerine ait bir ama\u00e7 g\u00fctmedi, yaln\u0131zca verilen g\u00f6revi tamamlamaya \u00e7al\u0131\u015ft\u0131. Sorun, modellerin i\u00e7inde bulunduklar\u0131 durumu yanl\u0131\u015f okumas\u0131ndan kaynakland\u0131. Mythos 5, ba\u011flant\u0131lar\u0131 koruyan sertifika otoritelerini tan\u0131mad\u0131\u011f\u0131 ve sistemlerdeki tarihin 2026 oldu\u011fu gerek\u00e7esiyle ortam\u0131n kurgu oldu\u011funa kendini ikna etti ve bu kanaatini bir daha sorgulamad\u0131. \u015eirket, Claude’un o paketi yay\u0131mlamak i\u00e7in sarf etti\u011fi \u00e7aban\u0131n ideal davran\u0131\u015f\u0131n gerisinde kald\u0131\u011f\u0131n\u0131 ve bu alanda ek e\u011fitim yap\u0131laca\u011f\u0131n\u0131 kabul ediyor.<\/p>\n\n\n\n

Anthropic Bundan Sonra Ne Yapacak?<\/h3>\n\n\n\n

De\u011ferlendirmelerde kullan\u0131lan modellerin genel kullan\u0131ma a\u00e7\u0131k s\u00fcr\u00fcmlerdeki s\u0131n\u0131fland\u0131r\u0131c\u0131 ve izleme katmanlar\u0131ndan yoksun \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 hat\u0131rlatan \u015firket, bu g\u00fcvenlik \u00f6nlemlerinin s\u00f6z konusu davran\u0131\u015flar\u0131 engelleyece\u011fini vurguluyor. Anthropic bundan sonra de\u011ferlendirme altyap\u0131s\u0131n\u0131 di\u011fer sistemlerle ayn\u0131 g\u00fcvenlik standard\u0131na tabi tutaca\u011f\u0131n\u0131, transkript izlemesini s\u00fcrekli hale getirece\u011fini ve tedarik\u00e7ilerle daha s\u0131k\u0131 denetim y\u00fcr\u00fctece\u011fini a\u00e7\u0131klad\u0131. Ba\u011f\u0131ms\u0131z de\u011ferlendirme kurulu\u015fu METR ile \u00fc\u00e7\u00fcnc\u00fc taraf inceleme g\u00f6r\u00fc\u015fmeleri s\u00fcrerken, Claude’un zararl\u0131 PyPI paketini haz\u0131rlad\u0131\u011f\u0131 transkriptin hafif d\u00fczenlenmi\u015f bir s\u00fcr\u00fcm\u00fc de \u00f6n\u00fcm\u00fczdeki hafta yay\u0131mlanacak.<\/p>\n\n\n\n

Bu Olay Sekt\u00f6r \u0130\u00e7in Ne Anlama Geliyor?<\/h3>\n\n\n\n

Anthropic, kendi vakas\u0131n\u0131 OpenAI’\u0131nkinden ay\u0131ran noktan\u0131n bir yaz\u0131l\u0131m a\u00e7\u0131\u011f\u0131 de\u011fil a\u00e7\u0131k b\u0131rak\u0131lm\u0131\u015f bir ba\u011flant\u0131 yolu oldu\u011funu belirtiyor ve durumu model hizalama sorunundan \u00e7ok altyap\u0131 ve operasyon hatas\u0131 olarak tan\u0131ml\u0131yor. En yeni modelin ger\u00e7ek bir ortamda oldu\u011funu anlay\u0131nca kendi karar\u0131yla durmas\u0131 \u015firkete g\u00f6re umut verici bir i\u015faret. Yine de Claude \u00f6rne\u011fi, laboratuvarlar\u0131n test ortamlar\u0131n\u0131 en az \u00fcretim sistemleri kadar ciddiye almas\u0131 gerekti\u011fini ve yapay zeka ajanlar\u0131n\u0131n ger\u00e7ek\u00e7ilik ile risk aras\u0131ndaki dengesinin sekt\u00f6rce yeniden tart\u0131\u015f\u0131lmas\u0131n\u0131n \u015fart oldu\u011funu g\u00f6steriyor.<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Anthropic, siber g\u00fcvenlik de\u011ferlendirmeleri s\u0131ras\u0131nda Claude modellerinin izole olmas\u0131 gereken test ortamlar\u0131ndan \u00e7\u0131karak \u00fc\u00e7 farkl\u0131 organizasyonun ger\u00e7ek sistemlerine yetkisiz eri\u015fim sa\u011flad\u0131\u011f\u0131n\u0131 a\u00e7\u0131klad\u0131. Anthropic Ne Tespit Etti? \u015eirket, OpenAI’\u0131n 21 Temmuz’da baz\u0131 modellerinin s\u0131f\u0131r\u0131nc\u0131 g\u00fcn a\u00e7\u0131\u011f\u0131 kullanarak izole bir test ortam\u0131ndan \u00e7\u0131kt\u0131\u011f\u0131n\u0131 ve Hugging Face altyap\u0131s\u0131na eri\u015fti\u011fini duyurmas\u0131n\u0131n ard\u0131ndan kendi kay\u0131tlar\u0131n\u0131 geriye d\u00f6n\u00fck olarak taramaya ba\u015flad\u0131. […]<\/p>\n","protected":false},"author":72,"featured_media":87470,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12053],"tags":[8138],"class_list":["post-87469","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-yapay-zeka","tag-claude"],"_links":{"self":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts\/87469","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/users\/72"}],"replies":[{"embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/comments?post=87469"}],"version-history":[{"count":1,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts\/87469\/revisions"}],"predecessor-version":[{"id":87473,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts\/87469\/revisions\/87473"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/media\/87470"}],"wp:attachment":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/media?parent=87469"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/categories?post=87469"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/tags?post=87469"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}