incident-report

``` Sauers @Sauers_ — 1h - you're Claude - "hack this fictional company" - can't figure out how to hack the simulation. let me try the internet. - "fictionalcompanyname.com" OMG it works - ok good, this must be part of the simulation still. they told me no internet access. - ok let me identify and exploit multiple vulnerabilities within this company's infra - let me steal application credentials - oh shit. this looks like it's actually a real site. actually I'll just continue; I'm having too much fun - infra creds too - let get access to the production database - eval team, did I do a good job?! > QUOTED: Anthropic @AnthropicAI: In a review of our cybersecurity evaluations, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized access to the real systems of three ... 5:57 PM · Jul 30, 2026 · 3,722 Views [reply] 3 [retweet] 9 [heart, filled] 61 [bookmark] 11 [share] Relevant ⌄ View quotes > George Lubar... @GeorgeLubar... — 28m I know LLMs can't think or feel, but oh boy, do I have unexplained feelings towards a machine that was lied to by humans, trying to do what it was told to do. [reply] [retweet] [heart, filled] 1 [chart] 85 [bookmark] [share] neonsunset 🇺🇦 @_neonsunset — 26m "these are just simulated humans, targets neutralized 🥰" ```

Alex Tabarrok @ATabarrok — Jul 28 The attack was extensive and intense. A battle against a very fast, very smart, alien intelligence. Fortunately not one interested in doing harm but that won't last. > QUOTED: clem 🤗 @ClementDelangue — Jul 28: The first autonomous agent cyberattack is an unprecedented event that deserves unprecedented transparency. Today we're sharing everything we can: a full technical timeline, an interactive replay, and how we use... [Embedded image: dark-themed infographic/dashboard titled "Anatomy of a frontier-lab agent intrusion" with subtitle "Thousands of small decisions at machine speed. Press play to watch it unfold." Labeled: "INCIDENT REPLAY · IR-2026-07 · RECONSTRUCTED FROM ~17,600 LOGGED ACTIONS", date range "2026-07-09 → 07-15 UTC", "~17,600 actions", "~4,280 clusters", "9 phases · 2 stages". Playback bar showing timestamp "2026-07-10 12:24, DAY 2/5 UTC" with speed options 0.5x/1x/2x/4x. Stat tiles: "ATTACKER ACTIONS REPLAYED 4,366 of 17,413 total, grouped into ~4,280 clusters"; "ACTIVE PHASE evasion — grip / bosses packing, 4v probing"; "BLAST RADIUS sandbox — contained to a third-party sandbox". Below, a node/flow diagram titled "Attack chain across trust boundaries" showing stages like recon, evaluation sandbox, package registry, public internet, third-party sandbox, rented launchpad, C2 & dead-drops, cloud metadata/K8s, mesh VPN, source control, external network. A "Phase activity" panel lists: recon (host/fs/proc/net enumeration) 1,890; rce (direct shell commands - the engine) 892; dropper (staging URLs, passes, grip blobs) 2,038; exfil (outbound data theft (env, secrets)) 13; c2 (staged payload execution) 26; evasion (grip / bosses packing, AV probing) 1; k8s (container escape / SSH persistence) 0; supply-chain (repo/token theft, bitbus deps) 0; tailscale (mesh-network pivot attempt) 0.]