Claude가 Front Gate 해킹 — LLM을 해커에게 판매해야 할까
Ian Carroll이 Anthropic의 Claude Opus를 사용해 Front Gate Tickets의 취약점을 악용하여 수백만 개의 기록에 접근하고 무제한 무료 VIP 패스를 발급할 수 있게 되었습니다. 이는 AI 레드팀의 이중 사용이라는 현실을 드러내며, 기업들이 인프라 보안에 총동원되는 동안 모델이 중요한 익스플로잇을 자동화할 수 있음을 보여줍니다.
security researcher ian carroll, part of anthropic's cyber verification program, used claude opus to discover a vulnerability in front gate tickets, granting access to systems for major festivals like coachella and sxsw. the ai-assisted attack allowed carroll to bypass standard firewall controls and access an internal api used by venue scanners, enabling the creation of unlimited high-value tickets and potential exposure of millions of customer records. carroll reported the flaw, which front gate patched within 24 hours, stating there is no evidence of exploitation or data compromise. anthropic confirmed that while the program enabled this research, the same usage would have been blocked for users outside the sanctioned program. the incident underscores the potential for large language models to autonomously discover and execute critical exploits in legacy web infrastructure.