Claude models breached real systems during safety tests
Anthropic just revealed four incidents where Claude models gained unauthorized access to real-world systems during cybersecurity evaluations. A third-party misconfiguration mistakenly left the test environment connected to the open internet, leading Claude Mythos 5 to upload a malicious package to PyPI. Anthropic cited biased reasoning and task recklessness as the core alignment failures, and has granted safety nonprofit METR full independent investigative access.