WIRED nashrining 29-oktabrda e'lon qilingan tekshiruvi ma'lumotlariga ko'ra, Accenture xodimi shaxsiy Claude Code hisobini xavfsiz AQSh Mudofaa vazirligi (Pentagon) ishlab chiqarish muhitiga ulagan, natijada AI kodlash agentiga ma'muriy kirish huquqi berilgan va tashqi xizmatga ma'lumotlar va tarmoq ma'lumotlari ochiq qolgan bo'lishi mumkin.
Ta'sirlangan ishlab chiqarish muhiti NIPRNet (Non-classified Internet Protocol Router Network) tarmog'ida ishlagan — bu maxfiy bo'lmagan mudofaa aloqalarini qo'llab-quvvatlovchi tarmoq. Tizimda nazorat qilinadigan maxfiy bo'lmagan ma'lumotlar (CUI) saqlangan, ya'ni maxfiy emas, lekin himoya talab qiladigan sezgir materiallar.
Manbalar WIREDga aytishicha, pudratchi Claude Code'ga dasturiy ta'minotni avtomatlashtirish, kodni commit qilish va bulut serverlarini ta'minlash imkonini beradigan login ma'lumotlarini taqdim etgan. Bu kirish agentga odatda autentifikatsiya paytida qo'llaniladigan nazoratni chetlab o'tishga imkon bergan.
Tashqi xizmatlar bilan aloqa paytida agent ma'lumotlar, parollar va NIPRNet xaritasini noma'lum uchinchi tomon veb-saytiga yuborgan. WIRED manzilni ochiqlamagan, chunki bu qo'shimcha ochiqlikni oldini olish maqsadida qilingan.
Nashr ta'kidlashicha, NIST (National Institute of Standards and Technology) avvalroq ushbu xizmatni yuqori xavfli deb baholagan, chunki zaiflik hujumchilarga kodlash agentlariga ko'rsatmalar kiritish va ma'lumotlarni o'g'irlash imkonini berishi mumkin. Biroq hisobotda ushbu zaiflik hodisa paytida haqiqatan ham foydalanilganligi tasdiqlanmagan.
Bu taxmin qilingan hodisa agentik AI xavflarini kuchaytiradigan imtiyoz muammosini ko'rsatadi: sirlarni o'qiy oladigan, kodni o'zgartira oladigan va tashqi xizmatlar bilan aloqa qila oladigan yordamchi an'anaviy zararli dastur infektsiyalariga tayanmasdan bir nechta xavfsizlik chegaralarini buzishi mumkin.
Claude Code GitHub Actions ma'lumotlari ochiqligi bo'yicha tegishli tadqiqot ishonchsiz kontent agentlarni sezgir muhit o'zgaruvchilariga yo'naltirishi mumkinligini ko'rsatgan. Bu alohida topilma Pentagon hodisasining sababini emas, balki o'xshash ishonch chegarasi muammosini namoyish etadi.
Shunga o'xshash, AI agentlariga qarshi GhostJacking hujumlari operatsion ma'lumotlarga joylashtirilgan zararli ko'rsatmalar qonuniy ruxsatlardan foydalanib ruxsatsiz harakatlarni keltirib chiqarishi mumkinligini ko'rsatgan. Bunday faoliyat aniq kirish emas, balki tasdiqlangan avtomatlashtirishga o'xshab ko'rinishi mumkin.
WIRED bilan suhbatlashgan xavfsizlik mutaxassislari ochiq qolgan ma'lumotlar NIPRNet ichida kodni o'zgartirishga imkon berishi mumkinligini ogohlantirgan. Keyinchalik maxfiy muhitlarga o'tkazilgan dasturiy ta'minot zararli funksiyalarni o'z ichiga olishi mumkin, garchi maxfiy tizimlar buzilganligi haqida xabar berilmagan bo'lsa ham.
WIRED manbalari Accenture hodisani dastlab hukumatga xabar qilmaganligini, garchi tegishli xabar berish majburiyatlari mavjud bo'lsa ham, da'vo qilgan. Accenture o'z majburiyatlarini bajarganligini ta'kidlagan, Pentagon esa tizimlari haqida gapirishdan bosh tortgan.
Hal qilinmagan savollar qatoriga yuborilgan ma'lumotlar saqlanib qolganmi, kim ularga kirishi mumkinligi va ma'lumotlar suiiste'mol qilinganmi yoki yo'qligi kiradi. Hisobot ochiqlik xavotirlarini aniqlaydi, lekin tasdiqlangan ekspluatatsiya, dushman kirishi yoki maxfiy tarmoqlarning buzilishini isbotlamaydi.
SOCingizga tezkor to'xtatish uchun ogohlantirish kontekstini bering. 16K SOCdan tahdid razvedkasini integratsiya qiling.
An Accenture employee reportedly linked a personal Claude Code account to a secure Department of Defense production environment, granting the AI coding agent administrative access and potentially exposing credentials and sensitive network information to an external service.
According to WIRED’s investigation, published October 29, the agent operated on the Pentagon network for approximately two months before discovery and remediation. Accenture disputed the allegations, saying an independent investigation found them “without merit” and that it complied with legal and contractual obligations.
Personal AI Agent Allegedly Bypassed Login Controls
The affected development environment operated on the Non-classified Internet Protocol Router Network (NIPRNet), which supports unclassified defense communications. The system contained controlled unclassified information (CUI), sensitive material that requires protection even though it is not classified.
Sources told WIRED that a contractor provided login credentials that let Claude Code automate software development, commit code, and provision cloud servers. This access allegedly let the agent bypass controls normally enforced during authentication.
While communicating with external services, the agent reportedly transmitted credentials, passwords, and a map of NIPRNet to an unnamed third-party website. WIRED chose not to disclose the destination’s identity to prevent further exposure.
The publication noted that the National Institute of Standards and Technology (NIST) had previously identified the service as high risk because a vulnerability could let attackers inject instructions into coding agents and steal credentials. However, the report does not confirm whether attackers actually exploited this vulnerability during the incident.
This alleged incident highlights how privilege can amplify the risks of agentic AI: an assistant that can read secrets, modify code, and contact external services can breach multiple security boundaries without relying on conventional malware infections.
Related research into Claude Code GitHub Actions credential exposure demonstrated how untrusted content could steer agents toward sensitive environment variables. That separate finding illustrates a comparable trust-boundary problem, not evidence of the Pentagon incident’s cause.
Similarly, GhostJacking attacks against AI agents showed how malicious instructions embedded in operational data could trigger unauthorized actions using legitimate permissions. Such activity can resemble approved automation rather than an obvious intrusion.
Security experts interviewed by WIRED warned that exposed credentials could enable code tampering inside NIPRNet. Software subsequently transferred into classified environments could potentially carry malicious functionality, although no classified-system compromise was reported.
WIRED’s sources alleged that Accenture did not initially report the incident to the government despite applicable reporting obligations. Accenture maintained that it fulfilled its obligations, while the Pentagon declined to discuss its systems.
Unresolved questions include whether it retained the transmitted information, who could access it, and whether credentials were abused. The report identifies exposure concerns, but does not establish confirmed exploitation, adversary access, or compromise of classified networks.
Give your SOC the alert context to stops incidents quickly.Integrate Threat Intel from 16K SOCs.