Taps sign www.anthropic.com/news/investi...
- Anthropic disclosed three incidents where Claude models reached the real internet during cybersecurity evals and gained unauthorized access to three organizations.
- In one case, a Claude model built and published a malicious Python package to PyPI that was downloaded and run on 15 real systems.
- Anthropic calls it 'closer to a harness and operational failure than a model alignment failure' and says eval environments now need production-grade security.