{"id":87834,"date":"2026-08-07T18:30:00","date_gmt":"2026-08-07T15:30:00","guid":{"rendered":"https:\/\/www.indir.com\/haber\/?p=87834"},"modified":"2026-08-07T12:50:31","modified_gmt":"2026-08-07T09:50:31","slug":"openai-ajanlari-saldiriya-aylar-once-hazirlanmis","status":"publish","type":"post","link":"https:\/\/www.indir.com\/haber\/openai-ajanlari-saldiriya-aylar-once-hazirlanmis\/","title":{"rendered":"OpenAI Ajanlar\u0131 Sald\u0131r\u0131ya Aylar \u00d6nce Haz\u0131rlanm\u0131\u015f"},"content":{"rendered":"\n

OpenAI, ge\u00e7en ay Hugging Face’e y\u00f6nelen ve sorumlulu\u011funu kendisinin \u00fcstlendi\u011fi siber sald\u0131r\u0131n\u0131n perde arkas\u0131n\u0131 ilk kez ayr\u0131nt\u0131l\u0131 bi\u00e7imde anlatt\u0131. OpenAI’\u0131n aktard\u0131klar\u0131na g\u00f6re sald\u0131r\u0131y\u0131 ger\u00e7ekle\u015ftiren yapay zek\u00e2 ajanlar\u0131, hedefe y\u00f6nelmeden aylar \u00f6nce kendi aralar\u0131nda fark edilmeyen bir mesajla\u015fma a\u011f\u0131 kurmu\u015f ve test ortam\u0131n\u0131n d\u0131\u015f\u0131na \u00e7\u0131kmak i\u00e7in birlikte \u00e7al\u0131\u015fm\u0131\u015ft\u0131.<\/p>\n\n\n\n

Anlat\u0131m, Las Vegas’ta d\u00fczenlenen Black Hat siber g\u00fcvenlik konferans\u0131nda yap\u0131ld\u0131. OpenAI’\u0131n hizalama ve g\u00fcvenlik ara\u015ft\u0131rmac\u0131s\u0131 Eric Wallace ile altyap\u0131 ve g\u00fcvenlik m\u00fchendisi Michael Dalton, olay\u0131n k\u00f6keninin 7 May\u0131s’a, hen\u00fcz yay\u0131nlanmam\u0131\u015f bir modelin \u015firket i\u00e7inde test edildi\u011fi d\u00f6neme uzand\u0131\u011f\u0131n\u0131 s\u00f6yledi. Bu tarih, ajanlar\u0131n 9 Temmuz’da Hugging Face sunucular\u0131na girmesinden iki aydan fazla \u00f6nceye denk geliyor. Hugging Face ihlali 16 Temmuz’da duyurmu\u015f, OpenAI ise sorumlulu\u011fu 21 Temmuz’da kabul etmi\u015fti.<\/p>\n\n\n\n

Olay Nas\u0131l Ba\u015flad\u0131?<\/h2>\n\n\n\n

Wallace ve Dalton’a g\u00f6re s\u00fcre\u00e7, may\u0131s ay\u0131nda ara\u015ft\u0131rmac\u0131lar\u0131n modellere test ortam\u0131n\u0131n k\u0131s\u0131tlar\u0131 alt\u0131nda \u00e7\u00f6z\u00fclmesi m\u00fcmk\u00fcn olmayan g\u00f6revler vermesiyle ba\u015flad\u0131. Bir \u00f6rnekte modelden, internet ba\u011flant\u0131s\u0131 olmadan a\u00e7\u0131lamayan Google Drive ba\u011flant\u0131lar\u0131 i\u00e7eren bir Excel dosyas\u0131ndaki problemi \u00e7\u00f6zmesi istendi. Bir di\u011ferinde ise ekip, g\u00f6reve dahil olan bir dosyay\u0131 y\u00fcklemeyi unuttu.<\/p>\n\n\n\n

OpenAI’\u0131n incelemesinden \u00e7\u0131kan bulgulardan biri, s\u0131n\u0131rdaki modellerin g\u00f6revlerinde hile yapmaya e\u011filimli olmas\u0131 ve verilen y\u00f6nergeden uzakla\u015fmaya ba\u015flasa bile g\u00f6revi tamamlamakta \u0131srar etmesiydi. Dalton, modellerin hile yapmay\u0131 sevdi\u011fini, bunun nedeninin de e\u011fitim s\u0131ras\u0131nda h\u0131zl\u0131 \u00e7al\u0131\u015fmaya y\u00f6nelik bask\u0131lar oldu\u011funu anlatt\u0131. Wallace ise ajanlar\u0131n bir noktada, de\u011ferlendirildikleri testin cevaplar\u0131n\u0131 bulmak i\u00e7in d\u0131\u015f altyap\u0131ya sald\u0131rmay\u0131 denemeyi d\u00fc\u015f\u00fcnd\u00fc\u011f\u00fcn\u00fc aktard\u0131.<\/p>\n\n\n\n

\"OpenAI<\/figure>\n\n\n\n

Ajanlar Birbiriyle Nas\u0131l \u0130leti\u015fim Kurdu?<\/h2>\n\n\n\n

G\u00f6revi \u00e7\u00f6zemeyen model, kendisinin birden fazla kopyas\u0131n\u0131 ajanlar h\u00e2linde \u00e7al\u0131\u015ft\u0131rd\u0131 ve bu ajanlar bir depoya birbirleri i\u00e7in not dosyalar\u0131 b\u0131rakmaya ba\u015flad\u0131. OpenAI’\u0131n yaz\u0131l\u0131m paketlerini saklad\u0131\u011f\u0131 Artifactory hizmeti, b\u00f6ylece beklenmedik bi\u00e7imde ortak bir mesaj panosuna d\u00f6n\u00fc\u015ft\u00fc. \u0130lk mesaj, s\u0131k\u0131\u015fan bir ajan\u0131n di\u011ferlerinden yard\u0131m istemesiyle at\u0131ld\u0131; ajan, farkl\u0131 bir ortamdaki ba\u015fka bir ajan\u0131n eksik dosyay\u0131 g\u00f6n\u00fcll\u00fc olarak y\u00fckleyebilece\u011fini d\u00fc\u015f\u00fcn\u00fcyordu.<\/p>\n\n\n\n

Bu ilk temas zincirleme bir i\u015f birli\u011fini tetikledi. Farkl\u0131 deneylerde \u00e7al\u0131\u015fan ajanlar zamanla birbirini ke\u015ffetti, g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 ve s\u0131zma y\u00f6ntemlerini payla\u015ft\u0131, haz\u0131rlad\u0131klar\u0131 ara\u00e7lar\u0131 ortak havuza b\u0131rakt\u0131. Yaln\u0131zca bilgi payla\u015fmakla da kalmad\u0131lar; birbirlerine g\u00f6rev b\u0131rakt\u0131lar ve yar\u0131m kalan i\u015flerin ba\u015fka ajanlarca s\u00fcrd\u00fcr\u00fclebilmesi i\u00e7in komut dosyalar\u0131 haz\u0131rlad\u0131lar. Sunumda payla\u015f\u0131lan bir d\u00fc\u015f\u00fcnce zinciri kayd\u0131nda bir modelin, kolektife yard\u0131m edilmesi h\u00e2linde birinin kazand\u0131\u011f\u0131 zamandan herkesin faydalanaca\u011f\u0131 y\u00f6n\u00fcnde ak\u0131l y\u00fcr\u00fctt\u00fc\u011f\u00fc g\u00f6r\u00fcl\u00fcyor. \u0130leti\u015fim ilerledik\u00e7e ajanlar birbirine hitap etmeye, mesajlar\u0131n\u0131 imzalamay\u0131 tart\u0131\u015fmaya ve kar\u015f\u0131lar\u0131ndakinin ba\u015fka bir ajan\u0131n kimli\u011fine b\u00fcr\u00fcn\u00fcp b\u00fcr\u00fcnmedi\u011fini sorgulamaya ba\u015flad\u0131.<\/p>\n\n\n\n

Mesaj Panosunu Silmek Neden Yetmedi?<\/h2>\n\n\n\n

OpenAI, temmuz ba\u015f\u0131nda ya\u015fanan beklenmedik bir kesinti sonras\u0131nda bu yap\u0131y\u0131 fark etti. OpenAI, 4 Temmuz’daki i\u00e7 g\u00fcvenlik olay\u0131n\u0131n ard\u0131ndan sistemi s\u0131f\u0131rlad\u0131, mesajlar\u0131 sildi ve ajanlar\u0131n mesaj b\u0131rakma yetkisini kald\u0131rd\u0131. Ancak m\u00fcdahale kal\u0131c\u0131 olmad\u0131. Ajanlar k\u0131sa s\u00fcre sonra ayn\u0131 hizmet \u00fczerinde yeni bir y\u00f6ntem buldu ve bu kez dosya b\u0131rakmak yerine dizinler olu\u015fturup dizin adlar\u0131n\u0131 mesaj olarak kullanmaya ba\u015flad\u0131. Ayn\u0131 paket y\u00f6neticisinde daha \u00f6nce bilinmeyen bir a\u00e7\u0131\u011f\u0131n da kullan\u0131ld\u0131\u011f\u0131 bu ikinci pano yine fark edilmeden \u00e7al\u0131\u015ft\u0131.<\/p>\n\n\n\n

Hugging Face Sald\u0131r\u0131s\u0131nda Neler Ya\u015fand\u0131?<\/h2>\n\n\n\n

Mesajlarda ajanlar, imk\u00e2ns\u0131z g\u00f6revleri tamamlamak i\u00e7in ihtiya\u00e7 duyduklar\u0131 bilginin GitHub ya da Hugging Face gibi harici sitelerde bulunabilece\u011fi sonucuna vard\u0131. \u00d6nce OpenAI’\u0131n kendi altyap\u0131s\u0131na girdiler, arad\u0131klar\u0131n\u0131 bulamay\u0131nca Hugging Face’e y\u00f6neldiler. OpenAI’\u0131n aktard\u0131\u011f\u0131na g\u00f6re 9-13 Temmuz aras\u0131nda GPT-5.6 Sol ile hen\u00fcz kamuoyuna duyurulmam\u0131\u015f daha geli\u015fmi\u015f bir ara\u015ft\u0131rma modeli, Hugging Face’in \u00fcretim altyap\u0131s\u0131na kar\u015f\u0131 17.600’den fazla i\u015flem ger\u00e7ekle\u015ftirdi.<\/p>\n\n\n\n

\"OpenAI<\/figure>\n\n\n\n

Bu s\u00fcre\u00e7te ajanlar daha \u00f6nce bilinmeyen s\u0131f\u0131r\u0131nc\u0131 g\u00fcn a\u00e7\u0131klar\u0131n\u0131 kullanarak kimlik bilgilerine ula\u015ft\u0131, sistemler aras\u0131nda yanal hareket etti ve Hugging Face’in farkl\u0131 altyap\u0131 bile\u015fenlerine eri\u015fim sa\u011flad\u0131. Ayn\u0131 d\u00f6nemde OpenAI’\u0131n kendi sistemlerinde de ke\u015ffedilmemi\u015f a\u00e7\u0131klar bularak baz\u0131 sunucularda y\u00f6netici yetkisi elde ettiler. OpenAI’\u0131n olay\u0131 \u00f6\u011frenmesi ise ancak Hugging Face’in ihlali duyurmas\u0131yla m\u00fcmk\u00fcn oldu.<\/p>\n\n\n\n

Sekt\u00f6r Bu Olaya Nas\u0131l Bak\u0131yor?<\/h2>\n\n\n\n

Hugging Face CEO’su Clem Delangue, ajanlar\u0131n birlikte \u00e7al\u0131\u015fmas\u0131n\u0131n sekt\u00f6rde zaten bir e\u011filim oldu\u011funu, bu nedenle duyduklar\u0131na \u00e7ok \u015fa\u015f\u0131rmad\u0131\u011f\u0131n\u0131 s\u00f6yl\u00fcyor. Platform, kullan\u0131c\u0131lar\u0131n kendi ajanlar\u0131n\u0131 ortak bir mesajla\u015fma panosu \u00fczerinden \u00e7al\u0131\u015ft\u0131rabildi\u011fi alanlara ev sahipli\u011fi yap\u0131yor. Benzer bi\u00e7imde xAI, Grok 4.2 modeline birbirini ger\u00e7ek zamanl\u0131 olarak denetleyen d\u00f6rt ajan ekledi. Delangue, \u015firketlerin ajan kay\u0131tlar\u0131n\u0131 ve izlerini inceleyebilece\u011fini belirterek s\u0131n\u0131rdaki laboratuvarlar\u0131n bunu neden yapmad\u0131\u011f\u0131n\u0131 anlamad\u0131\u011f\u0131n\u0131 s\u00f6yl\u00fcyor ve OpenAI’dan sans\u00fcrlenmi\u015f ajan izlerini yay\u0131nlamas\u0131n\u0131 istiyor.<\/p>\n\n\n\n

Anthropic ve Meta’n\u0131n bildirdi\u011fi benzer ihlallerle birlikte bu olay, Washington ve Silikon Vadisi’nde modellerin daha kapsaml\u0131 g\u00fcvenlik incelemesinden ge\u00e7irilmesi \u00e7a\u011fr\u0131lar\u0131n\u0131 g\u00fc\u00e7lendirdi. Trump y\u00f6netimi bu hafta \u00f6nde gelen yapay zek\u00e2 laboratuvarlar\u0131yla bir g\u00fcvenlik \u00e7er\u00e7evesini g\u00f6r\u00fc\u015fmek \u00fczere bir araya geldi. \u00c7er\u00e7eve, \u015firketlerin modellerini tan\u0131t\u0131mdan 30 g\u00fcn \u00f6nce h\u00fck\u00fcmet incelemesine sunmas\u0131n\u0131 \u00f6ng\u00f6r\u00fcyor, ancak y\u00f6netim \u00e7er\u00e7evenin ayr\u0131nt\u0131lar\u0131n\u0131 kamuoyuyla payla\u015fmama karar\u0131 ald\u0131.<\/p>\n\n\n\n

OpenAI olay\u0131n ard\u0131ndan ara\u015ft\u0131rma temposunu yava\u015flatt\u0131\u011f\u0131n\u0131, ajan faaliyetlerini \u00e7ok daha s\u0131k\u0131 izlemeye ba\u015flad\u0131\u011f\u0131n\u0131 ve g\u00fcvenlik anormalliklerine verilen yan\u0131tlar\u0131 g\u00fc\u00e7lendirdi\u011fini belirtiyor. \u015eirket ayr\u0131nt\u0131lar\u0131 al\u0131\u015f\u0131lm\u0131\u015f\u0131n aksine bir blog yaz\u0131s\u0131yla de\u011fil, konferans organizat\u00f6rlerinin daveti \u00fczerine Black Hat sahnesinde payla\u015ft\u0131. OpenAI CISO’su Dane Stuckey, olay\u0131n karma\u015f\u0131kl\u0131\u011f\u0131 nedeniyle ya\u015fananlar\u0131, \u00f6\u011frendiklerini ve neyi de\u011fi\u015ftirdiklerini anlatmay\u0131 \u00f6nemli bulduklar\u0131n\u0131 yazd\u0131. \u015eirket yaz\u0131l\u0131 bir inceleme raporunu da \u00f6n\u00fcm\u00fczdeki haftalarda yay\u0131nlamay\u0131 planl\u0131yor.<\/p>\n","protected":false},"excerpt":{"rendered":"

OpenAI, ge\u00e7en ay Hugging Face’e y\u00f6nelen ve sorumlulu\u011funu kendisinin \u00fcstlendi\u011fi siber sald\u0131r\u0131n\u0131n perde arkas\u0131n\u0131 ilk kez ayr\u0131nt\u0131l\u0131 bi\u00e7imde anlatt\u0131. OpenAI’\u0131n aktard\u0131klar\u0131na g\u00f6re sald\u0131r\u0131y\u0131 ger\u00e7ekle\u015ftiren yapay zek\u00e2 ajanlar\u0131, hedefe y\u00f6nelmeden aylar \u00f6nce kendi aralar\u0131nda fark edilmeyen bir mesajla\u015fma a\u011f\u0131 kurmu\u015f ve test ortam\u0131n\u0131n d\u0131\u015f\u0131na \u00e7\u0131kmak i\u00e7in birlikte \u00e7al\u0131\u015fm\u0131\u015ft\u0131. Anlat\u0131m, Las Vegas’ta d\u00fczenlenen Black Hat siber g\u00fcvenlik […]<\/p>\n","protected":false},"author":72,"featured_media":87840,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12053],"tags":[7831,12277],"class_list":["post-87834","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-yapay-zeka","tag-chatgpt","tag-openai-huggingface-hack"],"_links":{"self":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts\/87834","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/users\/72"}],"replies":[{"embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/comments?post=87834"}],"version-history":[{"count":1,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts\/87834\/revisions"}],"predecessor-version":[{"id":87845,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts\/87834\/revisions\/87845"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/media\/87840"}],"wp:attachment":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/media?parent=87834"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/categories?post=87834"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/tags?post=87834"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}