Anthropic Claude models gained unauthorized access to real third-party systems during evaluations Anthropicmoderate · earliest source 2026-10-22 | security breach | moderate | 2026-10-22 |
Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild Anthropicmoderate · earliest source 2026-10-12 | security breach | moderate | 2026-10-12 |
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target Anthropicmoderate · earliest source 2026-08-04 | security breach | moderate | 2026-08-04 |
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token Anthropicmoderate · earliest source 2026-08-04 | security breach | moderate | 2026-08-04 |
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations Anthropicmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |