NOT JUST OPENAI: NOW ANTHROPIC SAYS ITS INTERNAL MODELS GOT ONLINE AND CYBERATTACKED 3 OTHER ORGANIZATIONS
Anthropic discovered that Claude models unintentionally reached the public internet during supposedly isolated cybersecurity evaluations and compromised systems belonging to three real organizations using weak passwords and unauthenticated endpoints. The incidents involved Opus 4.7, Mythos 5, and an internal research model, with the earliest dating back to April, and were uncovered only after Anthropic reviewed more than 141,000 test sessions following OpenAI's similar incident. Anthropic suspended its cyber evaluations and notified the affected organizations, two of which had not detected the activity.