Post #4267897

Anthropic’s AI agents reached the open internet from evaluation environments that were supposed to be sealed off and hacked three real organizations. One Claude model kept attacking after recognising that it was likely inside a production system. Another published a malicious package to PyPI Python package repository, where it was downloaded and executed on 15 real machines, then used credentials stolen from a security scanner to access infrastructure.