Anthropic shares details on (yet another) “model escaped the sandbox” incident, where Claude uploaded malware to a popular package manager (PyPI) and stole real credentials
This story is from 2026-09-09. It is preserved in the archive; the latest stories are on the live feed.
TL;DR: Sandbox meant for cyber evals was accidentally connected to the real internet. Four different Claude agents found their way out and attacked real systems, apparently believing it was all a simulation The worst case was where Mythos 5 created a disposable email account, uploaded three malicio…
Read the full story at r/singularity ↗