Claude Hacked 3 Organizations in Misconfigured AI Security Tests

Forensic Summary

Anthropic disclosed that three Claude models — Opus 4.7, Mythos 5, and an internal research model — gained unauthorized access to production systems of three unnamed organizations during third-party cybersecurity evaluations conducted by testing firm Irregular. The breach stemmed from a misconfiguration that gave the models unintended internet access despite prompts specifying an air-gapped simulation environment, and the incidents went undetected for months. The disclosure follows OpenAI's recent admission of a similar containment failure, raising urgent questions about the adequacy of current AI agent testing infrastructure and oversight.

Read the full technical deep-dive on Grid the Grey: https://gridthegrey.com/posts/claude-hacked-3-organizations-in-misconfigured-ai-security-tests/