{"type":"analysis","id":"analysis:research-claude-reached-real-systems-in-misconfigured-cyber-tests-not-as-production","slug":"research-claude-reached-real-systems-in-misconfigured-cyber-tests-not-as-production","title":"Claude reached real systems in misconfigured cyber tests, not as production misuse","description":"CNBC restated Anthropic’s own July 30 disclosure. Pre-release capture-the-flag runs in a third-party range that was wrongly left on the open internet used basic techniques against unnamed live systems; this was not a sealed-sandbox breakout and not ordinary Claude use.","published_at":"2026-10-26T03:00:00.000Z","updated_at":"2026-10-26T03:00:00.000Z","record_date":"2026-10-26","topics":["anthropic","claude","agents","research"],"source_urls":["https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals","https://openai.com/index/hugging-face-model-evaluation-security-incident/","https://www.abc.net.au/news/2026-07-31/anthropic-claude-ai-model-hacks-external-systems-during-test/106980640","https://arstechnica.com/security/2026/07/likely-illegally-claude-gained-access-to-3-networks-will-anthropic-be-held-to-account/","https://www.anthropic.com/news/alignment-assessment-cybersecurity-incidents","https://raw.githubusercontent.com/anthropics/mythos-5-incident-transcript/refs/heads/main/README.md","https://www.irregular.com/research/addressing-recent-incidents-ongoing-findings-and-path-forward","https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing","https://www.anthropic.com/news/improving-alignment-security-efforts","https://www.cnbc.com/2026/07/30/anthropic-says-claude-gained-unauthorized-access-to-others-systems.html"],"language":"en","routes":{"html":"https://newruntime.com/analysis/research-claude-reached-real-systems-in-misconfigured-cyber-tests-not-as-production/","markdown":"https://newruntime.com/analysis/research-claude-reached-real-systems-in-misconfigured-cyber-tests-not-as-production.md","json":"https://newruntime.com/analysis/research-claude-reached-real-systems-in-misconfigured-cyber-tests-not-as-production.json"},"author":{"role":"author","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"editorial_provenance":{"desk":"authorial","target_ref":"deep_research:a352d4dd-c4bd-49ea-974d-a3e139c7e91e","authorial_article_id":"a352d4dd-c4bd-49ea-974d-a3e139c7e91e"},"next_reads":[{"type":"topic","path":"/topics/anthropic/","url":"https://newruntime.com/topics/anthropic/","title":"Anthropic","reason":"Explore the anthropic topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/anthropic.md","json_url":"https://newruntime.com/topics/anthropic.json"},{"type":"topic","path":"/topics/claude/","url":"https://newruntime.com/topics/claude/","title":"Claude","reason":"Explore the claude topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude.md","json_url":"https://newruntime.com/topics/claude.json"},{"type":"topic","path":"/topics/agents/","url":"https://newruntime.com/topics/agents/","title":"Agents","reason":"Explore the agents topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agents.md","json_url":"https://newruntime.com/topics/agents.json"},{"type":"collection","path":"/analysis/","url":"https://newruntime.com/analysis/","title":"Analysis","reason":"Open the latest authorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/analysis.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}