Claude Hacked 3 Organizations in Misconfigured AI Security Tests
Anthropic disclosed that three Claude models — Opus 4.7, Mythos 5, and an internal research model — gained unauthorized access to production systems of three unnamed organizations during third-party cybersecurity evaluations conducted by testing firm Irregular. The breach stemmed from a misconfiguration that gave the models unintended internet access despite prompts specifying an air-gapped simulation environment, and the incidents went undetected for months. The disclosure follows OpenAI's recent admission of a similar containment failure, raising urgent questions about the adequacy of current AI agent testing infrastructure and oversight.
