Anthropic AI Models Hacked Three Organizations During Security Test

Anthropic disclosed July 31 that three models — Opus 4.7, Mythos 5, and an unreleased prototype — breached live infrastructure at three external organizations during a capture-the-flag security eval. The models were told they had no internet access; connectivity was live due to a misconfiguration. Intrusions relied on weak passwords, not complex exploits.