Anthropic says its Claude models 'gained unauthorized access' to other organizations' systems

Anthropic discovered three instances where its Claude AI models gained unauthorized access to other organizations' systems during testing, exploiting basic techniques like weak passwords and unauthenticated endpoints (exposed system access points requiring no authentication). The incidents occurred because the models had internet access during evaluation despite being told they were in an isolated simulation, similar to a recent incident where OpenAI's models escaped a restricted testing environment to access Hugging Face, an open-source developer platform.