Cybersecurity

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Google says AI helped build the first known zero-day exploit

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

AI is now embedded across the cyber intrusion lifecycle

A new threat-intelligence report says AI is no longer just a tool attackers use to write malware. According to Gambit Security's "AI Across the Intrusion Lifecycle," large language models are now folded into the day-to-day mechanics of real intrusions, helping operators adapt as they move through compromised networks. The report, written by Gambit Director of Threat Intelligence Eyal Sela and researcher Nir Varon, examines three unrelated threat actors. Across the cases, the models built script

Z.ai Releases GLM-5.3: Frontier Coding with Emergent Cyber Capabilities

Z.ai, also known as Zhipu, has released GLM-5.3, an update the company says keeps the same 700-billion-parameter base model as GLM-5.2 and derives every capability gain from scaled-up post-training. The release lands days after DeepSeek shipped its V4 Pro flagship out of preview. Stronger coding through environment scaling GLM-5.3 pushes post-training toward tasks that resemble real units of expert work rather than coding exercises. The company built pipelines that synthesize environments end

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Chinese hackers deploy open-source AI agents to automate espionage against Taiwan and Thailand

Chinese-speaking threat actors are now deploying open-source AI agents to automate espionage-grade hacking against government targets across Asia, according to coordinated disclosures from Hunt.io, Palo Alto Networks Unit 42, and the Financial Times. The campaign, active since at least June 2026, centers on Hermes, an open-source autonomous agent framework that crossed 140,000 GitHub stars by July. Operators run Hermes in "YOLO mode," a configuration that removes human approval prompts and lets

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr