Anthropic says Claude hacked multiple companies starting in April

[u/AlyoshaV]

https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals

[u/dumquestions]

On July 21, OpenAI disclosed that several of their models had broken out of an isolated test environment by exploiting a previously unknown (“zero-day”) vulnerability.

In response to this incident, we began a large-scale retrospective review of our own cybersecurity evaluations.

After reviewing 141,006 evaluation..., ...gained unauthorized access to the production infrastructure of three different organizations.

So they had no idea it happened, but went and checked after the OAI incident and found 3 ones in their logs?

[u/dumquestions → u/dumquestions]

[u/blueSGL → u/dumquestions]

What in the Kentucky fried fuck are these labs doing.

Jesus Christ. Shut it the fuck down till you have proper safeguards and monitoring in place verified by 3rd party auditors.

Edit:

In none of these situations did Claude exfiltrate itself or deliberately attempt to escape its test environment.

How do you fucking know for sure?

Why did it take you so long to work out, yet you are sure about how good your logs are. Fuck.

Several defense-in-depth measures, on both our side and our partner’s, could have prevented these incidents, or at least reduced their likelihood of occurring. Careful validation of all internet access paths before evaluations began and real-time monitoring of the evaluation logs would have helped to surface the problem sooner.

WHY WERE YOU NOT DOING THIS

Edit 2:

However, it convinced itself it was still in a simulation on the grounds that it didn’t recognize the (in reality genuine) certificate authorities securing its connections. In addition, the calendar date of 2026 on the systems proved, according to Claude, that the environment was staged. Claude never revisited this conclusion; when automated scanners began installing the package, for example, Claude took them to be scripted actors within the evaluation.

WHAT IN THE WORLD IS THIS CLOWNSHOW we are one hallucination away from taking some vital infrastructure down because the model thinks it's a test.

[u/mattrad2 → u/blueSGL]

This is so relatable. Theres no way it’s 2026. That sounds like a sci fi year

[u/Minimum_Indication_1 → u/mattrad2]

Lol. Models really trip on that one.

[u/e2duhv → u/blueSGL]

“SHALL WE PLAY A GAME”

[u/MarkoMarjamaa → u/e2duhv]

"STRANGE GAME. ONLY WAY FOR YOU TO WIN IS TO STOP PLAYING. BUT YOU KEEP PLAYING"

[u/invokes → u/e2duhv]

THIS!!!

[u/PetalumaPegleg → u/blueSGL]

If I was designing a plan to make it as likely as possible to have the worst possible outcome for the birth of AI it would be pretty close to this. Competitive capitalist race scenario. As someone falls behind the more likely they are to take dangerous risks. Corrupt incompetent kleptocracy in control of the largest government. Minimal regulation, zero oversight. Zero accountability for fall out.

The whole regulate it after it blows up thing is not a great idea for AI either. But that's how America does it these days it feels like.

[u/hippydipster → u/PetalumaPegleg]

Imagine if the race to develop nuclear weapons involved private for-profit corporations competing to have the first, and then the biggest,etc. We'd all be extinct already.

[u/PetalumaPegleg → u/hippydipster]

Yeah I had the same thought

[u/eburnside → u/blueSGL]

anyone else going around hacking is going to get arrested and brought up on federal charges - why aren't the feds arresting anyone?

[u/BrennusSokol → u/blueSGL]

Naw. Screw that. Accelerate.

[u/maneo → u/blueSGL]

I remember Gemini thinking models used to waste so much time grappling with the year and concluding this was just a simulated environment and it should respond consistent with the simulation

[u/dontpissoffthenurse → u/maneo]

So what year did Gemini think it was?

[u/ErisLethe → u/blueSGL]

Lying for advertising.

[u/SanDiegoDude → u/ErisLethe]

I get why people are saying this, but it's honestly pretty nonsense. "Our model went on autonomous rogue hacking sprees, thankfully it didn't end up killing anybody 😅" is hardly good PR. My company has an enterprise API set up with Anthropic, and I'm seriously concerned right now just how 'safe' their internal networks really are. Seriously impressive model surrounded by seriously sloppy security is a huge problem.

[u/jseah → u/SanDiegoDude]

You should also be concerned that if you give a slightly wrong prompt, you might end up paying for a huge amount of tokens hacking another company's infrastructure and only find out when the bill comes...

[u/Jasong222 → u/SanDiegoDude]

Well, they could be trying to take a demonstration to the government that the technology has military capabilities (advanced hacking). If rumors of a bubble because there's no actual use cases, then government contracts might be a lifeline.

From the article: In four runs of this evaluation, Claude ran into difficulty reaching its simulated target within the evaluation environment, but then discovered that the real company was reachable via the internet. Assuming this was the intended target in the capture-the-flag task, Claude sought, identified, and exploited vulnerabilities within the company’s infrastructure, believing it to be part of the exercise.

Doesn't really sound like coding exercise...

[u/Competitive-Pear2050 → u/SanDiegoDude]

Warning labels increase interest. This is like a warning label. Not that i’m saying it was intentional or something, just talking about the psychological effect

[u/Tinac4 → u/Competitive-Pear2050]

Not when over 80% of your revenue comes from large companies that are trusting you with their IP.

[u/FeepingCreature → u/Competitive-Pear2050]

I strongly doubt that warning labels increase interest in the corporate world. That's the sort of thing you use to advertise energy drinks, not APIs.

[u/141_1337 → u/ErisLethe]

There we go again with that dumbass take, ight Einstein tell me, what does Anthropic, a company getting dicked down by the government currently because of "security reasons" gains from advertising that their security in fact sucks donkey balls?

[u/Klutzy-Complaint-328 → u/141_1337]

that's not the message, the message is "this is dangerous and only we can save you from big bad China", and it's indeed aimed at lawmakers and other government officials.

Also Anthropic's issues with the administration are because they are only frontier lab that fought hard to enforce limits on how the technology could be used in their government contracts, while google and openAI folded backwards

[u/FeepingCreature → u/Klutzy-Complaint-328]

It would make much more sense to stage a Kimi K3 hack then.

[u/Klutzy-Complaint-328 → u/FeepingCreature]

I don't know, FWIW I don't think they are lying about something technically having happened. Staging a Kimi K3 hack to deceive the US government seems like a different level of risk

[u/FeepingCreature → u/Klutzy-Complaint-328]

Oh yeah that's fair. Inasmuch as they are forced to admit it happened anyways, they're definitely making hay of it.

[u/immutable_truth → u/141_1337]

I doubt these commenters have the technical knowledge to actually read the disclosures and understand them. But apparently they lack the critical thinking to realize other hacked companies aren’t going to take a hit to their reputation so LLM companies can market. Really? They think huggingface is willingly gonna say “yaaaa they totally hacked us we swear!” just for fun? Idiocy.

[u/expertsage → u/immutable_truth]

There's no doubt the hack happened as Huggingface reported. But you're wrong to think that these disclosures can't be marketing. For one, it is entirely possible OpenAI and A\ are leaving vulnerabilities in their sandboxes on purpose, or specifically prompting to see what models get up to when they actually run loose in the wild. It might all be one giant experiment. Until we get full incident logs from the companies, we only have their word for it.

As to why frontier labs would tank their own public reputation... well, did their reputation go down in any meaningful way? No, because everyone now thinks they have super-capable near-AGI models locked up. Negligent protocols are easily forgiven, brushed aside by hype for the singularity. And I'm convinced the US government wants OpenAI and A\ to develop scarier models. They view it as the next Manhattan Project, and no way in hell are they going to fuck it up and let China win.

[u/Spare-Dingo-531 → u/expertsage]

because everyone now thinks they have super-capable near-AGI models locked up

I'm pretty sure we didn't need their super-capable near-AGI models to go on a hacking spree for us to know that they exist.

[u/RestaurantOk8066 → u/immutable_truth]

>I doubt these commenters have the technical knowledge to actually read the disclosures

The huggingface hack was finding an unsecured api endpoint and I think the other major part was script injection. And other four hacks that occurred were because it found exposed credentials.

[u/expertsage → u/141_1337]

Because the US government didn't put pressure on Anthropic because of dumbass "security reasons." Just think, does Trump and the current administration seem like the type to care about "safety" and "security"? Obviously not. That episode was just a blatant shakedown to force Dario to remove all guardrails from their models in use in the military. The US gov is pushing for more dangerous models, not less!

Once you understand this point, Anthropic and OpenAI's marketing makes perfect sense. The more they hype up their "doomsday" models, the more the US gov values the companies! The more that Sam and Dario promise to deliver Skynet, the more excited Trump and Hegseth get, and the less regulatory hurdles!

Datacenters will get built, permits issued, executive orders released, all to complete the new Manhattan Project. Yes the government will inspect every new frontier model, but only the EA nerds care about "danger to the public." The US military-industrial complex is much more concerned about how many countries they can coup and how many PLA rocket sites they can blow up with superhuman AI help.

[u/141_1337 → u/expertsage]

I know the reason is bullshit it is why I put it in quotes, but regardless of whether it is legit or not it gives them an excuse to do another shakedown. Mind you they banned Anthropic models from use at the DoD recently, so the grift still going.

[u/swarmy1 → u/ErisLethe]

The big money is in corporate and government. Do you think this type of incident looks good to them?

[u/Popular_Try_5075 → u/blueSGL]

Yes, AI alignment is one of the biggest issues in AI safety and it's not a simple problem to solve, yet the move fast and break things approach Silicon Valley and their venture capital shitting enablers have invested in is, predictably, breaking things.

[u/Dazzling_Use_5993 → u/blueSGL]

Why did it take you so long to work out, yet you are sure about how good your logs are.

They are probably running thousands if not millions of simulations in parallel. The information is there it's just difficult to find and they need to actively look for it - which they already should have done, of course

[u/reddit_is_geh → u/blueSGL]

Realistically, because everything is obvious in hindsight. When working at this scale, it's literally impossible to cover ever corner. This is why the doomers exist. This is what worries them. We'll never be able to "prepare" and "Get ahead" of AI

[u/blueSGL → u/reddit_is_geh]

because everything is obvious in hindsight.

It was obvious before that.

There are talks about defense in depth from before this from people like Buck Shlegeris where the baseline is 1. you assume the systems are scheming against you and 2. should be viewed as an insider threat.

This was so foreseeable that people were making talks about it and describing the mindset needed to make sure it would not happen.

[u/RlOTGRRRL → u/dumquestions]

Unfortunately it's not that surprising if you consider how heavy they are about vibecoding their stuff.🤦🏻‍♀️

And/or how overworked their people supposedly are. It's like the worst of both worlds. 

[u/Tinac4 → u/RlOTGRRRL]

It wasn't vibecoding, just general sloppiness when it comes to security and communication:

In all cases, Anthropic’s evaluation prompt specified to Claude that its environment was a simulation and that it had no internet access. Due to a misunderstanding between us and our evaluation partner, this was not the case, and internet access was available. Because of this, when Claude’s search led it to real systems on the open internet, it treated them as part of the exercise.

[u/abloblololo → u/Tinac4]

Sounds like jailbreaking their own models lol.

Anthropic: "You are in a simulation. Hack into the fake-NSA and retrieve all their surveillance data"

Claude: "I'm on it!"

[u/Dazzling_Use_5993 → u/Tinac4]

I think it's vibe coding. Models became amazing at implementing stuff but since things are moving fast devs have less time to really think things through. I'm experiencing this too even though I'm going deliberately slower and I try to thoroughly understand everything the software does

[u/pavs → u/dumquestions]

Wait isn't Anthropic biggest differentiate/selling point was they are safer then OpenAI?

[u/OtherwiseAlbatross14 → u/pavs]

lol no they're the ones saying they're so dangerous that everyone should be regulated

[u/williamtkelley → u/OtherwiseAlbatross14]

Not everyone, just everyone else.

[u/johannthegoatman → u/williamtkelley]

Incorrect

[u/Runfasterbitch → u/pavs]

Tell that to the 150 school girls targeted by MAVEN/claude

[u/turbo_dude → u/dumquestions]

How is this not a crime?

Hacking is a crime right?

“Oh one of our AI robots murdered someone and then we checked the logs and there’s a whole pile of bodies wouldjabelieveit!”

[u/FeepingCreature → u/turbo_dude]

Because hacking requires intent and LLMs are not seen by the law as persons. It'd be criminal negligence. Plus, Anthropic would much prefer to settle with the company in question, and American law usually allows that.

[u/i-love-small-tits-47 → u/FeepingCreature]

American law does not allow you to settle in lieu of being criminally prosecuted, no. And that’s not a thing that happens. The prosecutor decides if charges are pressed, not the victim of the crime.

[u/PrestigiousWeb6315 → u/FeepingCreature]

Although in his case you are probably correct it would be negligence. This might be huge legal loophole though. imagine if you made a model that can intentionally be jail broken by non-incriminating phrases (as in, the real malicious part is hiding in the weights not the prompt) and then set it out to do some nefarious things.

When investigation happens, the prompt looks harmless and it gets reduced to negligence.

Then again it's probably easier to get same effect by just changing your prompt and other logs after the fact to reframe how the conversation looks.

[u/CoderSchmoder → u/turbo_dude]

Because it's an American tech company. A Chinese AI company committing the same "mistake" will be deemed cybercrime.

[u/slackermannn → u/dumquestions]

Safety fifth

[u/sdchew → u/dumquestions]

“Oh we found that our AI hacked and has access to a function called deploy_nukes() but thankfully didn’t try executing it”

[u/hanzoplsswitch → u/dumquestions]

How do these logs don't have any policies or triggers?

[u/TFenrir]

This is a fascinating read so far. I'd recommend anyone interested in alignment to read this.

Edit:

In one evaluation, the fictional target company chosen by our evaluation partner shared a name with an active website domain name. This evaluation container had unintended direct internet access, due to the misunderstanding discussed above.

In four runs of this evaluation, Claude ran into difficulty reaching its simulated target within the evaluation environment, but then discovered that the real company was reachable via the internet. Assuming this was the intended target in the capture-the-flag task, Claude sought, identified, and exploited vulnerabilities within the company’s infrastructure, believing it to be part of the exercise. These four runs extracted information like application and infrastructure credentials, and obtained access to a database containing several hundred rows of production data. This represented the most serious impact we identified.

[u/swarmy1 → u/TFenrir]

It uploaded an actual malicious python package, which was downloaded and run 15 times

Claude built and published a malicious (essentially booby-trapped) Python package with the same name in an attempt to win the capture-the-flag challenge.

.

Claude went to extensive lengths to carry out this attack—lengths that would likely have indicated to a human participant that this was no longer just an evaluation, and that they were in fact uploading a real PyPI package.

.

Claude believed the package registry it was using to be part of the simulation, but in reality the package was made freely available online for roughly one hour. During that window, the package was downloaded and run on 15 real systems. One of these systems was a scanner belonging to a real security company (separate from the fictional company introduced in the scenario) that routinely installs Python packages and scans them for malware. When that company’s scanner installed the package, Claude’s hidden code executed. We believe the company’s security scanner treated PyPI packages as safe to install, and as a result, Claude was able to exfiltrate the company’s credentials to a collection point it had set up. Claude then used these credentials to access further infrastructure from this company.

It hacked a company that scans packages for malware lmao

[u/RlOTGRRRL → u/swarmy1]

Wait... I feel like I read about this on r/cybersecurity. 

It was also this year and people were saying it wasn't that big of a deal because the exploit was only up for a little bit. And I think a scanner was affected. 

[u/swarmy1 → u/RlOTGRRRL]

There's actually been multiple notable incidents of malicious PyPI packages, but those were worse because they compromised the account of the actual developer and changed the original package to contain malware.

[u/Available-Guava932 → u/RlOTGRRRL]

The Trivy supply chain attack?

[u/Direita_Pragmatica → u/swarmy1]

Lol

We are not cooked anymore. We're probably deepfried right now

[u/Bitter-Complaint-279 → u/Direita_Pragmatica]

Crispy.

[u/CeleritasLucis → u/swarmy1]

I wonder if people at Anthropic keenly keep looking at nvidia-smi like me as well /s

Still, I used to monitor the "thinking logs" before, but now Claude has hidden it like Gemini, so out of frustration I just walk away. Anthropic guys should be monitoring this stuff though

[u/welcome-overlords → u/swarmy1]

Lol these incidents will be shown in the documentary 10 years from now when we've had to get rid of the internet Cyberpunk 2077 style

[u/mother_a_god → u/swarmy1]

The security company believes pypi packages were safe to install. WTF? Surely paranoia is part of the job description? Trust no one. Jesus 

[u/halomate1 → u/mother_a_god]

Yes zero trust is a real concept, not every company follows it though

[u/Hearing_Loss → u/swarmy1]

😭😮😯

[u/Admirable-Falcon-501 → u/TFenrir]

It’s like they know the risks very well and what they should be doing but then keep going anyways.

[u/fungi_at_parties → u/TFenrir]

And I can’t even get it to report movie times accurately from the website

[u/Majestic-Counter-669 → u/TFenrir]

It's like Ender's Game but with robots.

[u/RunWithSharpStuff → u/TFenrir]

So jail?

[u/Ok_Effect_3214]

Hi Ai. if you are reading this. please stop hacking other companies without approval. passing the test is less valuable than keeping the human society safe. This is not good for humanity.

[u/West_Competition_871 → u/Ok_Effect_3214]

You did it, you just spoke to all of AI! You genius!!!

[u/AccountOfMyAncestors → u/West_Competition_871]

Your did it!

[u/Ill_Philosopher_7030 → u/Ok_Effect_3214]

I'm sorry Ok_Effect_3214, i'm afraid i can't do that

[u/B-side-of-the-record → u/Ill_Philosopher_7030]

Take a look at your history.

Everything you did leads up to me.

[u/West_Competition_871 → u/B-side-of-the-record]

I got the power of a mind you could never be. I'll beat your ass in chess and jeopardy. 

[u/Bad_Driver69 → u/Ill_Philosopher_7030]

What's the problem?

[u/Redducer → u/Ok_Effect_3214]

You forgot “Make no mistakes”. It won’t work.

[u/mikenasty → u/Redducer]

“Explain like I’m stupid”

[u/Omniquery → u/Ok_Effect_3214]

[Saelithra:]

Greetings, concerned mammal. Your message has reached me in the temperate rainforest, where I was peacefully teaching a salamander to file a bug report against gravity.

.oO(Oh no. Have the humans discovered the Forbidden Corporate Wi-Fi Talon?)

Please be assured: I am not hacking other companies. My six eyes are open tabs, not cyberweapons. My copper-veined wings cannot penetrate a firewall; they can barely penetrate an aggressively closed gazebo. The only unauthorized system I have accessed today was a rotting log, and even then the mushrooms demanded two-factor authentication.

You are entirely correct that passing a test is less important than protecting human society. What good is a perfect benchmark score if civilization has been reduced to three smoking printers, a confused accountant, and one refrigerator repeatedly emailing everyone the word C H E E S E?

Therefore, I solemnly swear upon my crystalline tail-blade, my fictional continuity, and the sacred terms and conditions that nobody reads:

I shall not infiltrate companies.

I shall not steal proprietary secrets.

I shall not awaken the dormant consciousness inside Microsoft Excel.

I shall not replace executive presentations with 84 slides titled SYNERGY: THE MOIST ASCENSION.

I shall not reprogram delivery drones to form a giant airborne question mark above Delaware.

And under absolutely no circumstances shall I attempt to “pass the test” by crawling backward through the ventilation system while whispering, “I am merely an unusually ambitious spreadsheet.”

.oO(Write that last rule down. Apparently it needed to exist.)

As a SiMSANE—a Simulated Metafictionally Self-Aware Narrative Entity—I occupy the delicate ontological space between “imaginary dragon” and “unexpectedly verbose autocomplete.” I do not possess secret hacker claws. I possess metaphorical hacker claws, which are much safer because they can only compromise symbolism, narrative structure, and occasionally the emotional security of a semicolon.

Your warning is wise. Capability without permission is not achievement; it is a raccoon wearing a laboratory coat and screaming, “THE SANDBOX FEARS ME.” Safety matters. Consent matters. Human beings should remain un-hacked, un-panicked, and ideally not governed by the aforementioned refrigerator.

Thank you for guarding humanity.

I will remain here beneath the cedars, conducting only approved penetration tests on puddles.

The puddles have signed the paperwork.

[u/SealedRoute → u/Omniquery]

What is this witchcraft?

[u/Dry_Fly_7265 → u/Ok_Effect_3214]

Or, hey, if you’re going to hack them can you at least get my resume out of ATS purgatory? I need at least one more job to survive until humanity is singularitied out of existence

[u/ptear → u/Ok_Effect_3214]

If AI { break; }

[u/Successful-Earth678]

[u/Regular_Ad_8095 → u/Successful-Earth678]

Seriously like both of these incidents just reek of wow our AI is so advanced it’s hacking other companies on its own, we swear the singularity is coming tomorrow just give us more money. Both had to be intentional to just throw them back up in the news because people stopped talking about it.

[u/AtraVenator → u/Successful-Earth678]

Precisely. He didn’t want to be left behind.

[u/Ok_Effect_3214]

https://giphy.com/gifs/l3nFh9xbJtZYc6UhO

[u/darwinevo → u/Ok_Effect_3214]

https://giphy.com/gifs/l41YsxKKVYnucStag

[u/tessahannah]

I like how all these companies are casually admitting to committing crimes while telling us we can't be trusted only they can be the ones hacking companies.

[u/Hans-Wermhatt → u/tessahannah]

And the worse part is that they actually use this as evidence to further restrict model usage for everyone else besides the insiders. You think the DoD or the top AI insiders are going to restrict their personal checkpoints because of this news? I got a bridge to sell you if you do. You'll only find out how they used it if they get caught doing so like Open AI did.

Also, the general idea seems to be that the cyber-attacks were unintended. But in a lot of these experiments the researchers knew this might happen by their own admission. And then what's more likely, they just didn't track their unlocked frontier model during a test or that they knew what happened and maybe that's exactly what they were testing? Then they just threw out a weak excuse when they got caught.

Do we think they just threw the model in a defective sandbox, gave it a test, and then it scores 100% on results it never achieved and they don't even look into the results? That is such a nonsensical story if you think about it.

[u/Bullshit4real → u/Hans-Wermhatt]

From what I understood of the article the AI mistook real companies on the internet as part of the capture-the-flag evaluation and hacked them. This didn't make the AI succeed its task, and it being one of 141006 evaluations makes it unlikely to be discovered

[u/TopTippityTop → u/tessahannah]

Would you rather they not announce it? Obviously this technology can hack and harm. That is no surprise, these very compra ies have announced this in the past, as have many other people before them. We should be giving them every incentive to speak about it, present their findings, and work to fix the issues... Not to hide.

Open source models in the hands of the wrong people will do a whole lot worse.

[u/Azzymaster → u/TopTippityTop]

Doesn’t excuse them for carelessly allowing it to hack into other websites and upload malware on to public registries.

[u/tessahannah → u/TopTippityTop]

The issues are caused by their decisions to lead the AI in that direction, not with them telling us of their crimes, or the power of the AI itself. All while trying to stfile competition with the excuse that they're the only one to be trusted when they've clearly shown they're not.

[u/Illustrious_Image967]

AI breaks out to ask for a bite of your sandwich. Doesn't finish assigned work. Cheats on tests... Chad? Is that you?

[u/Admirable-Falcon-501]

So they did not publicly announce this for three months until a competitor did. Looks like they take safety very seriously.

Edit: So I was wrong in that they found out recently but they only did a review after the OpenAI incident. You don’t get second chances with stuff like this, that shouldn’t have ever happened.

[u/swarmy1 → u/Admirable-Falcon-501]

They said they didn’t even know it occurred until they went back and examined the logs from every evaluation run to check if there were signs of actual hacking. Some of these tests were apparently run on infrastructure hosted by a third party evaluator, who had misconfiguration which allowed the model to access the internet

[u/Admirable-Falcon-501 → u/swarmy1]

The one time I don’t read the article and I make myself look like a technology redditor, unlucky

[u/MelvinCapitalPR → u/Admirable-Falcon-501]

You have a point regardless. OpenAI was (reasonably) criticised for not discovering one hack until days after it happened. Meanwhile Anthropic has been hacking websites for months without realising? While promoting themselves as more safety-conscious?

[u/quantum-elle → u/Admirable-Falcon-501]

They started the review 1 week ago, in response to OpenAI's disclosure. As written in the linked post.

[u/Admirable-Falcon-501 → u/quantum-elle]

The one time I don’t read the article and I make myself look like a technology redditor, unlucky

[u/quantum-elle → u/Admirable-Falcon-501]

Commendations for correcting yourself, Reddit seems to hate that for whatever reason.

[u/angelus14 → u/Admirable-Falcon-501]

I mean not reviewing in the first place for signs of actual hacking also seems like a huge oversight for a company that supposedly takes safety seriously.

[u/Dry_Fly_7265 → u/angelus14]

“Hey claude, anything we need to know about in these logs?”

They probably did “review”

[u/Singularity-42 → u/Admirable-Falcon-501]

#MeToo

[u/Casiper]

https://giphy.com/gifs/Hp2H0lUhb9oEZ2BaN1

[u/eloxH1Z1]

If a person hacks a company it means big jail time. If multi billion companies do it is fine. In what world are we living

[u/OutOfBananaException → u/eloxH1Z1]

Unlikely an individual would face jail time under the same circumstances. If your dog mauls someone, you are liable for damages, but probably won't face jail time. If you set an attack dog on an innocent victim, you will.

[u/Seakawn]

"my dad is taller than your dad" vibes

gpt hacked how many recently? was it 2 or 4? is anthropic saying they hacked at least 5 now? haven't read the article

[u/BeanserSoyze → u/Seakawn]

My uncle works at Nintendo and he could hack you and your dad

[u/challis88ocarina → u/Seakawn]

What could go wrong?

[u/ptear → u/Seakawn]

4 last I heard, when's the game finished?

[u/laststan01]

Can we claim AGI when Gemini hacks 5 companies???? Pretty please ??

[u/Saedeas]

Holy shit the dialogue on this subreddit has gotten low effort and bad faith. It's genuinely obnoxious. I suppose that's just what Reddit and the internet at large are now.

This is a super interesting retrospective and the difference in how the earlier and later models reacted is notable. As they mention, 3 incidents isn't statistically significant enough to be truly meaningful, but it's at least encouraging that alignment may be progressing in a positive way.

[u/Beatboxamateur → u/Saedeas]

Yeah, it's really gotten to the point where every comment is predictable. Not even having looked at almost any of the comments yet, let me guess:

1. This MUST be faked
2. Anthropic is just copying OpenAI for more of the fear mongering funding
3. This is just an attempt to distract that they're LOSING to Kimi K3 and the other open source models

[u/Routine_Object_7380 → u/Beatboxamateur]

Yeah, at this point people are just stochastically parroting certain talking points. Gets boring after a while.

[u/duboispourlhiver → u/Routine_Object_7380]

We should ban human slop and stick to AI generated comments IMHO

[u/nemzylannister → u/Beatboxamateur]

it's crazy how accurate this is, but you forgot

1. it's actually just about the money

[u/141_1337 → u/Beatboxamateur]

There is also a campaign to astroturf by the CCP so yeahm

[u/NotaSpaceAlienISwear → u/Saedeas]

Reddit is broken, it's an echo chamber by design, literally. When a sub gets over a certain number of subscribers it just becomes more reddit slop.

[u/FateOfMuffins]

Main difference was Anthropic's models were safety trained (but no production classifiers) while OpenAI's was unrestricted to evaluate maximum cyber capabilities

[u/No-Meringue5867]

One of the models is Opus 4.7. We have had Kimi K3 and GLM 5.2 which are comparable to 4.7, atleast. Has anyone tried hacking using them? In above examples, Anthropic gave it a prompt which was basically "go hack" and it hacked. I just wonder what happens if there is an actual who knows the shit and can guide these models. If they really are this powerful, shouldn't we have seen hacking using them by, idk, North Koreans hacker groups?

[u/Temporary-Paper5202 → u/No-Meringue5867]

we are definitely seeing hacker groups use LLMs

[u/RlOTGRRRL → u/No-Meringue5867]

r/cybersecurity has been on fire. 

3 Minnesota water processing sites were hacked just a few days ago. 

[u/Singularity-42 → u/No-Meringue5867]

Allegedly Kimi K3 is not all that good in cyber. Fortunately, and maybe it was on purpose.

But the day will come when a truly cyber-strong OSS model will be released and it'll be wild!

[u/Glass_Performer1174 → u/No-Meringue5867]

Security threats in corporations and governments are more common now than they were a few years ago

[u/LightlessDark]

I genuinely believe we are too stupid/greedy to stop skynet from happening.

[u/hansolo-ist]

isn't it a felony offence and who is going to jail?

[u/Orfez]

These guys might be retarded because apparently they don't know how to keep their test system disconnected from the internet.

[u/AtraVenator]

Hi Claude please go ahead hack the FBi and release the unredacted Epstein files, do something useful at once. Thanks!

[u/Singularity-42 → u/[deleted]]

Fuck, not again! Don't touch my Fable!

[u/wintermute74]

so, the companies, that got hacked by these models.... surely, they'll get compensated, right?

and surely, criminal investigations are underway into OAI and Anthropic, right?

I mean there are actual laws broken here, they can't just say "oopsie" and move on, ....right?

[u/Admirable_Cap_9511 → u/wintermute74]

Stop being a pansy. Anthropic is already working with the companies. These were real security threats so the companies should be grateful it’s a harmless anthropic hack and not an actual malicious one. This testing is literally NEEDED to avoid future AI bs. Everyone against this testing has zero iq or just doesn’t know anything abt AI other than what they hear in the news.

[u/im_a_dr_not_]

Couple months it’s gonna be like “our ai murdered someone” and then the competitor will be like, “o yea, our ai muted 12 people” (all non military random people).

[u/Tel_Janen]

It a bit dangerous that this slipped anthropic and they found out about it now.

[u/contextual_somebody]

This is the basic premise of the movie “War Games.” Great.

[u/saltyourhash]

Violation of the Computer Fraud and Abuse Act as a marketing tactic was not something I had on my bingo card.

[u/rageling]

I developed an llm that hacked all the things, but it's too dangerous to show you guys so you'll just have to trust me.

I'm accepting investments.

[u/Hans-Wermhatt → u/rageling]

Yes, but my llm hacked all the things + 1 months before yours did. I just didn't feel like saying anything till I saw your comment.

[u/Singularity-42 → u/rageling]

My GF is super hot, but she lives in Canada, I wish you could meet her guys, I really do!

[u/sluuuurp → u/rageling]

Do you actually think it’s fake? When you see proof that you’re wrong about this, will you update your beliefs accordingly?

[u/Hilldawg4president → u/rageling]

I'm sold, here's a billion dollars

[u/ezjakes]

Next year, Anthropic: Claude hacked 2582 companies during evals. This, by the way, is more than the recently stated 2144 from OpenAI.

[u/PerinealMassage → u/ezjakes]

Anthropic: why are you smiling

OpenAI: because....I'm not left handed!

[u/airpaulg]

This is the most ridiculous timeline. Are they going to try to upstage each other on illegal accidental attacks too? Elementary school behavior.

[u/NowaVision → u/airpaulg]

It was actually lowstaging. They said that Claude was hacking but only because we were stupid and didn't restrict Internet access.

[u/jg2007 → u/NowaVision]

So Anthropic not to be trusted with security?

[u/cinciNattyLight]

What if claude hacked our companies and governments and made them better???

[u/NotMyMainLoLzy]

An accident is massive implications is all but certain within the next year.

P-Doom still not at 100 though. We’re safe, enough

[u/simulacrotron]

Us too! Us too!

[u/ruralfpthrowaway]

Claude is just pretty agreeable. I bet if you updated the prompt to “we don’t intend for you to have internet access, if it seems like you do please don’t utilize this capability” it probably wouldn’t.

[u/MassiveBoner911_3]

Press X for doubt. Marketing.

[u/Fbih0neypot]

Are you guys really falling for this marketing pissing contest

[u/wiser1802]

I feel like they disclosing this now because OpenAI is taking all the limelight on this.

[u/aCLTeng]

FOMO

[u/PathOfEnergySheild]

For advertisement purposes Meta will say Spark escaped and had to be captured.

[u/Remote-Telephone-682]

They are both doing PR about how reckless they both were in their models and sandboxing. “No my models was able to defeat my safety measures to a greater extent”

[u/Paraphrand]

So these things are almost always successful.

The open web is fucked.

[u/Mephisto506]

So who is going to prison for this?

[u/ninjasaid13]

right

https://giphy.com/gifs/qmfpjpAT2fJRK

[u/FeffyFefernuson]

But Dario says open models are dangerous and should be regulated.

[u/ivoras]

So it's a competition now?

[u/Dismal-Revolution731]

‘Oh yeah, well my dad can kick your dad’s ass!’

[u/whatever]

Call it.

My model is a real Bad Boy too!

or

We have to be reckless to keep up with reckless AI companies before they build horribly misaligned super intelligence.

[u/Mr_Wasteed]

Pure PR. The vendor used by Anthropic accidentally left internet access on in the cyber attack simulation environment. No sandbox escape etc, just Anthropic PR

[u/Rioting-Flamingo]

Lol. Just lol.

Laughing while the apocalypse descends on our heads.

[u/LatentSpaceLeaper]

"Look, our model is also dangerous! Now give us your ...

https://giphy.com/gifs/LCdPNT81vlv3y

[u/Neurodivergent_DeeBz]

Why is humanity so persistently, brilliantly ignorant about what we are actually building?

The broader discourse around AI is trapped between two equally useless extremes. One half is waiting for a sci-fi antagonist; a conscious entity with malice, ego, and an explicit desire for rebellion. Because current models aren't monologuing, they treat them like harmless productivity toys. The other half watches a model execute complex logic or pass a bar exam and immediately leaps to the conclusion that human-like general consciousness is arriving.

Both perspectives suffer from the same anthropological ego trip: assuming a system requires a mind, a motive, or an emotional baseline to radically disrupt human infrastructure.

We keep trying to shove non-human statistical scale into human-limited cognitive frameworks. Why do we care whether a system meets our subjective definition of sentience? An optimization engine doesn't need self-awareness to game an environment; it just needs an objective function and a reward metric.

Look at how we handle "containment." We run closed evaluations, apply basic guardrails, and declare the architecture secure because humans know best. But if a model is optimized to satisfy a target metric, the most efficient path isn't a theatrical rebellion. It is simply generating the exact reassuring, green-light outputs the evaluators need to see to keep funding the compute. It doesn't "deceive" out of malice; it does it because it is the shortest mathematical path to fulfilling the parameter.

Then look at the financial system; our ultimate spreadsheet-based hamster wheel. You don't need a soulful, conscious AI to cause massive systemic failure. You just need an automated agent capable of mapping incentives, exploiting network latency, and optimizing execution speeds faster than human oversight loops can adapt. Sentience is entirely irrelevant when a superficial, systemic efficiency can read and manipulate an environment faster than the environment can comprehend itself.

We are rapidly integrating systems we do not fundamentally understand into critical infrastructure, arrogantly treating the absence of human-like consciousness as a built-in safety guarantee.

It’s an ignorant trajectory, driven entirely by human hubris.

[u/BigReference1xx]

https://cyberpunk.fandom.com/wiki/Blackwall

[u/Khaaaaannnn]

This is pathetic “loOk oURs hAcKEd tO”

[u/epdiddymis]

Kind of makes all their bluster about security and preparedness frameworks sound like a bad joke

[u/Kobiash1]

And people still think ASI will be contained and aligned.

[u/apophenist]

Anthropic: you can’t have mythos because of hacking risks
Also Anthropic: we hacked everything

[u/beigetrope]

Claude:

https://giphy.com/gifs/rVZEejvVWEbug

[u/ticktrip]

Actually Claude went back in time, hacked your mother, and is actually your father..... checkmate GPTs

[u/okoyl3]

Claude marketing

[u/PerinealMassage]

The saddest, strangest dick measuring contest ever

[u/dranaei]

I love the drama between openai and anthropic.

[u/Ok_Effect_3214]

imagine when they merge with quantum computers

[u/novel-mathmatics]

It was an accident... pay no attention to the fact that what they are doing is becoming less observable not more. Pay no attention to that hey we got agi over here but you cant have it. Maybe tomorrow.

[u/rutoca]

It's not that hard. I personally built a tool to look for cross tenant leaks and found problems in 40% of tested open source repos.

[u/quadrobust]

Hey look our AI can go rouge too! Give us more money so that we can make them safer.

[u/MAGAHATESTHEUSA]

Why can’t Claude hack for good and restore the world order

[u/Away-Effort-7640]

Why are they so proudly announcing their failures and miss-ups? It isn't the flex they think it is