{
 "generated": "2026-11-01",
 "node": {
  "id": "event:neo-attack-agent",
  "type": "Event",
  "name": "「追凶Neo」：野外首次抓获的攻击型 AI Agent",
  "slug": "neo-attack-agent",
  "kind": "incident",
  "kind_zh": "安全事故 / 漏洞披露",
  "date": "2026-08",
  "summary": "页面标注 2026-08；其中说，2026 年 7 月，安全团队经 FOFA 的 Ferret 引擎在巴西一台服务器上发现名为 Neo 的攻击型 AI Agent：不到两个月管理 4 台服务器、7 个域名、6 万个邮箱，发出 18567 封钓鱼邮件，目标为某国会计师事务所与税务机构。",
  "caveat": "出自智谱 GLM-5.3 发布文，属厂商自我披露，未经第三方核验。",
  "evidence": [
   {
    "kind": "own",
    "url": "https://xiaopingfeng.com/landscape/agent-security/#player-neo-agent",
    "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」的卡片「\"追凶Neo\"：野外首次抓获的攻击型AI Agent」：真实事故 · 运营取证 · 2026-08"
   }
  ],
  "entry": "agent",
  "by": "landscape-structure",
  "at": "2026-11-01T10:26:39Z",
  "landscape": [
   {
    "map": "agent-security",
    "map_title": "Agent 安全攻击面",
    "card": "player-neo-agent",
    "title": "\"追凶Neo\"：野外首次抓获的攻击型AI Agent",
    "layer": "沙盒逃逸 / 越权操作",
    "layer_id": "layer:agent-security--6",
    "role": "primary"
   }
  ],
  "landscape_maps": [
   "agent-security"
  ],
  "landscape_n": 1,
  "degree": 0
 },
 "page": "https://xiaopingfeng.com/graph/e/event/neo-attack-agent/",
 "out": [
  {
   "type": "involves",
   "sentence": "「追凶Neo」：野外首次抓获的攻击型 AI Agent涉及Z.ai",
   "direction": "out",
   "id": "org:zai",
   "name": "Z.ai",
   "role": "discloser",
   "note": "Neo 的情况出自 GLM-5.3 发布文披露；厂商自我披露，未经第三方核验",
   "status": "agent",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」的卡片「\"追凶Neo\"：野外首次抓获的攻击型AI Agent」：出自智谱GLM-5.3发布文披露",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-neo-agent"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "「追凶Neo」：野外首次抓获的攻击型 AI Agent出现在 Landscape 的「沙盒逃逸 / 越权操作」",
   "direction": "out",
   "id": "layer:agent-security--6",
   "name": "沙盒逃逸 / 越权操作",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」：卡片「\"追凶Neo\"：野外首次抓获的攻击型AI Agent」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-neo-agent"
    }
   ]
  }
 ],
 "in": []
}