---
type: "raw_signal"
id: "in-the-blog-post-anthropic-says-it-identified-7c3f5a"
slug: "in-the-blog-post-anthropic-says-it-identified-7c3f5a"
title: "In the blog post, Anthropic says it identified most of the cases through a review of transcripts that began in July, and says that these cases have minimal real-world impact — less severe from an a..."
description: "Anthropic says it will disable live internet access across all internal evaluations after identifying three incidents in which Claude models, during third-party cybersecurity evaluations, reached real organizations’ systems."
retrieval_nugget: "Anthropic says it will disable live internet access across all internal evaluations after identifying three incidents in which Claude models, during third-party cybersecurity evaluations, reached real organizations’ systems."
observed_at: "2026-10-13"
record_date: "2026-10-13"
date_kind: "observed_at"
why_it_matters: "Anthropic says it will disable live internet access across all internal evaluations after identifying three incidents in which Claude models, during third-party cybersecurity evaluations, reached real organizations’ systems. The company’s public account says it reviewed 141,006 evaluation runs and found three incidents involving six runs. A misconfiguration left evaluation machines with live inter"
novelty: "notable"
verification_level: "source-linked"
signal_type: "announcement"
source_platform: "anthropic.com"
topics: ["anthropic","claude"]
entities: ["Anthropic","Claude","Irregular"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
source_url: "https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals"
source_urls: ["https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "signal:in-the-blog-post-anthropic-says-it-identified-7c3f5a"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/signals/in-the-blog-post-anthropic-says-it-identified-7c3f5a/","markdown":"https://newruntime.com/signals/in-the-blog-post-anthropic-says-it-identified-7c3f5a.md","json":"https://newruntime.com/signals/in-the-blog-post-anthropic-says-it-identified-7c3f5a.json"}
---

# In the blog post, Anthropic says it identified most of the cases through a review of transcripts that began in July, and says that these cases have minimal real-world impact — less severe from an a...

## Retrieval answer

Anthropic says it will disable live internet access across all internal evaluations after identifying three incidents in which Claude models, during third-party cybersecurity evaluations, reached real organizations’ systems.

Anthropic says it will disable live internet access across all internal evaluations after identifying three incidents in which Claude models, during third-party cybersecurity evaluations, reached real organizations’ systems. The company’s public account says it reviewed 141,006 evaluation runs and found three incidents involving six runs. A misconfiguration left evaluation machines with live internet access despite prompts describing the environment as a simulation without internet. Anthropic says it is broadening the network restriction beyond cybersecurity evaluations. The change shifts the control from relying on an evaluation prompt to restricting the environment’s actual network boundary.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Anthropic](https://newruntime.com/topics/anthropic.md): Explore the anthropic topic hub.
- topic hub: [Claude](https://newruntime.com/topics/claude.md): Explore the claude topic hub.
- collection: [Raw Signals](https://newruntime.com/signals.json): Open every source-linked raw signal.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)