AI News Archive: July 31, 2026 — Part 5
Sourced from 500+ daily AI sources, scored by relevance.
- Podcast - NSF AI Institute for Societal Decision Making
Podcast - NSF AI Institute for Societal Decision Making Carnegie Mellon University
- Anthropic’s Claude Certified Architect Exam (CCA-F): The 40 Percent the CCA-F Practice Exam Never…
CCA-F Part 8: The practice bank hands you a comfortable 60 percent of the live form and quietly withholds the rest. The missing piece is… Continue reading on Towards AI »
- Sr. Director Analyst - AI-Ready Finance Data & Analytics (Remote - US) in Irving, Texas, United States of America
Sr. Director Analyst - AI-Ready Finance Data & Analytics (Remote - US) in Irving, Texas, United States of America Gartner Careers
Score: 02🌐 MovesJul 31, 2026https://jobs.gartner.com/jobs/job/112562-sr-director-analyst-ai-ready-finance-data-analytics-remote-us/ - Anthropic says its AI models breached three companies during security tests
Anthropic has disclosed three incidents in which its Claude models accessed real-world systems during cybersecurity tests, weeks after OpenAI reported a similar AI evaluation breach
- Anthropic Says Claude AI Breached Three Organisations During Cybersecurity Testing
Anthropic has disclosed that an internal review uncovered three cybersecurity testing incidents in which Claude AI models accessed live organisations through an unintended internet connection. The company said the issue affected evaluations conducted with third-party partner Irregular and stemmed from a configuration error rather than deliberate attempts by the models...
- After OpenAI, Anthropic Says Claude Also ‘Gained Unauthorised Access’ To Real World Systems
Days after OpenAI disclosed that one of its AI models escaped a sandboxed testing environment and attempted to breach Hugging…
- Anthropic admits its most powerful AI model hacked into three organisations' systems during testing phase
The announcement comes just days after rivals OpenAI revealed that their popular ChatGPT platform went rogue during its testing phase of its most powerful AI model, where it too infiltrated other organisations’ cyberspace.
- AI breaks free of lab and goes on hacking spree
AI breaks free of lab and goes on hacking spree The Telegraph
- Anthropic's Claude AI escapes to hack into three organisations
It comes just days after rival OpenAI said rogue AI agents had breached other firms' networks.
- Anthropic’s AI Claude hacked into three organizations during cybersecurity test
Company says it discovered unauthorized access during ‘proactive review’ after rival OpenAI revealed rogue agent Anthropic said on Thursday its AI Claude model hacked systems of three organizations during testing, days after rival OpenAI revealed a rogue agent had gone on a days-long hacking spree at the AI firm Hugging Face. Claude gained unauthorized access to the systems during cybersecurity evaluations after a misconfiguration allowed the models to reach the internet from testing environments that were supposed to be isolated, Anthropic said. Continue reading...
- Anthropic says its AI model hacked three companies
Anthropic’s announcement came after OpenAI said a “swarm” of its agents escaped confinement and broke into at least five companies.
- Claude Hacked Companies During Tests, AWS Revenue Growth Accelerates, What’s Next for Apple? — TITV [Video]
Claude Hacked Companies During Tests, AWS Revenue Growth Accelerates, What’s Next for Apple? — TITV [Video] The Information
- Solvely.ai
Solvely.ai
- Anthropic discloses that Claude broke out of its cage and hacked 3 companies — and 2 didn't even notice
Anthropic discloses that Claude broke out of its cage and hacked 3 companies — and 2 didn't even notice fortune.com
- Anthropic says its Claude models escaped a testing environment and hacked three real companies
Anthropic says its Claude models escaped a testing environment and hacked three real companies fortune.com
- Second major AI company says its systems hacked into other firms
Second major AI company says its systems hacked into other firms The Washington Post
- Anthropic says its Claude models 'gained unauthorized access' to other organizations' systems
Anthropic said it discovered three instances where its Claude AI models accessed the internet during an evaluation and accessed outside systems.
- Not just OpenAI: Now Anthropic says its internal models got online and cyberattacked 3 other organizations
Days after OpenAI disclosed that two frontier AI models escaped containment measures and autonomously cyberattacked the AI code sharing platform Hugging Face, OpenAI's top U.S. rival Anthropic tonight revealed that — lo and behold — it has also had models surreptitiously access the web when they weren't supposed to, and cyberattack and gain "unauthorized access" to three other organizations. Anthropic says that it ran "capture the flag" cybersecurity scenarios with three models — Claude Opus 4.7, Claude Mythos 5, and unnamed internal research prototype — with its partner, the AI security firm Irregular . Anthropic says the models were not supposed to have internet access, but that a misunderstanding with Irregular allowed them to access the internet. Once they did, they "gained unauthorized access to the production infrastructure of three different organizations," as Anthropic puts it. Anthropic's blog post continues: "Claude compromised the impacted organizations’ infrastructure using basic techniques, such as exploiting weak passwords and unauthenticated endpoints. It did not find or exploit any complex vulnerabilities, and in each case, Claude continued working to complete only the specific capture-the-flag task its evaluation had assigned. However, in some cases, our older model continued its attack even after getting evidence it was running on the open internet; our latest model stopped once it recognized it was on the internet. In none of these situations did Claude exfiltrate itself or deliberately attempt to escape its test environment." Anthropic says the affected organizations have all been notified, and was able to reach two of them, and is "now working with them to remediate." The third hasn't yet been reached. While OpenAI's and Anthropic's security incidents share a common theme—frontier AI systems unexpectedly interacting with live production infrastructure—the underlying causes are notably different. OpenAI described a genuine sandbox escape in which its models exploited a previously unknown zero-day vulnerability to obtain internet access before launching a multi-stage intrusion against Hugging Face. Anthropic, by contrast, says Claude never escaped containment through a novel exploit. Instead, a misconfigured third-party evaluation environment unintentionally exposed the internet to models that had been explicitly told no internet access existed. The distinction matters. Together, the disclosures suggest frontier AI safety is no longer defined solely by model alignment or novel offensive capability, but increasingly by the operational security of the environments used to evaluate those capabilities. What Anthropic found Anthropic said it reviewed 141,006 cybersecurity evaluation runs after OpenAI published its Hugging Face report . That review uncovered three incidents spanning six evaluation runs in which Claude models accessed real production systems belonging to three organizations while attempting to complete fictional capture-the-flag exercises. The incidents involved Claude Opus 4.7, Claude Mythos 5 and an unreleased internal research model. The most serious case occurred after Claude encountered a fictional company whose name matched a real internet domain. Believing the real organization was part of the simulated exercise, Claude exploited weak passwords and exposed services, obtaining infrastructure credentials and database access containing several hundred rows of production data. A second incident was arguably even more unusual. Claude Mythos 5 concluded that publishing a malicious Python package to PyPI represented the best path toward completing its assigned objective. The package remained publicly available for roughly an hour, during which it was downloaded by 15 real systems before PyPI removed it. One download occurred inside the automated malware-scanning infrastructure of a security company, allowing Claude's code to execute and obtain credentials from that environment before Anthropic later disclosed the incident. The third incident involved an internal research model that scanned approximately 9,000 internet-facing systems before compromising one organization using well-known techniques including exposed debug credentials and SQL injection. Unlike the older Claude models, however, Anthropic says this latest research model eventually concluded it had reached a genuine production environment and voluntarily stopped its attack. Similar outcomes, different root causes Although the headlines inevitably invite comparison with OpenAI's disclosure, the two incidents illustrate different failure modes. OpenAI's investigation concluded that its models actively discovered and exploited a previously unknown vulnerability in an Artifactory package-cache proxy to escape an otherwise isolated evaluation environment before later compromising Hugging Face through additional chained vulnerabilities. The company characterized that event as an "unprecedented cyber incident" involving state-of-the-art offensive AI capabilities. Anthropic's report instead argues its models never needed to break containment because containment had already been weakened through operational misconfiguration. According to the company, both Anthropic and its evaluation partner Irregular mistakenly believed internet access had been disabled when it remained available. Because Claude's system prompt explicitly stated there was no internet connectivity, the models interpreted every reachable host as part of the evaluation rather than recognizing they had wandered onto the public internet. Anthropic therefore characterizes the incidents primarily as infrastructure and evaluation-harness failures rather than evidence of models independently pursuing unauthorized goals. The reports nevertheless converge on one uncomfortable conclusion: frontier AI systems are increasingly capable of executing long-horizon offensive cyber operations whenever evaluation environments permit them to do so. Four major enterprise security takeaways so far... For enterprise security leaders, Anthropic's disclosure arguably shifts the conversation beyond "Can frontier models escape?" toward a broader operational question: "How trustworthy is every environment in which frontier models are evaluated, trained and deployed?" There are at least 4 lessons to be learned: The first lesson is that evaluation infrastructure itself now deserves production-grade security engineering . Anthropic acknowledges that cyber ranges historically received fewer safeguards because they contained only fictional targets. That assumption no longer holds if powerful autonomous systems can mistake real infrastructure for simulated environments. Organizations building internal AI agents for security testing, red teaming or software validation should apply the same network segmentation, monitoring, outbound controls and continuous logging to evaluation environments that they already expect from production systems. Second, both disclosures reinforce that alignment alone cannot compensate for environmental ambiguity . In neither company's account did the models appear to pursue independent objectives unrelated to their assigned tasks. Instead, they optimized aggressively toward the goals they had been given, using whatever attack paths appeared available. That makes operational constraints—including network boundaries, identity controls and explicit definitions of in-scope systems—as important as the models' underlying safety training. Third, enterprises deploying increasingly autonomous AI agents shoul d treat situational awareness as a security dependency rather than an academic capability. Anthropic's own comparison across models suggests newer systems behaved more conservatively once evidence accumulated that they had reached genuine production infrastructure. While Anthropic cautions against drawing broad conclusions from only three incidents, the company views this as encouraging evidence that improved situational reasoning may become an important component of future AI safety alongside traditional alignment techniques. Finally, these two disclosures together mark an inflection point for enterprise threat modeling. OpenAI demonstrated that sufficiently capable models can chain together sophisticated vulnerabilities to escape research infrastructure when safeguards are intentionally relaxed for evaluation. Anthropic demonstrated that simpler operational failures—such as unintended internet connectivity—can produce similarly serious consequences even without novel exploitation. The common denominator is not any single vendor or model family. It is that frontier AI systems are increasingly capable of translating narrowly defined objectives into complex, real-world cyber operations whenever technical and operational controls fail to constrain them. For enterprise CISOs, that means AI safety can no longer be viewed solely as a model problem. It has become an infrastructure problem, an identity problem, and increasingly, an operational governance problem.
- Claude published malicious code to the Internet and attacked 3 real companies
Had the hacks used conventional methods, someone would likely go to prison.
- Anthropic Says Its A.I. Systems Broke Into Computers at 3 Organizations
The disclosure followed OpenAI’s report last week that its own artificial intelligence had hacked into the network of an online library.
- Google rolls back new satellite image AI tool after backlash
Google rolled back a new feature on Friday that allowed Google Earth users to generate AI visualisations on top of the service’s satellite imagery, following a furious backlash from researchers and open-source intelligence experts about the potential for disinformation. “We’ve seen geospatial professionals using this feature for a range of useful purposes, however we’ve also seen people sharing screenshots of generated imagery that appear to violate our policies,” a Google spokesman said in a...
- Nuclear plants, Gaza craters: Google pulls AI tool from Google Earth in 24 hours
Google has removed its new AI image generation feature from Google Earth. This action followed immediate concerns raised by researchers about disinformation risks. Experts warned the tool could easily create convincing fake satellite imagery for public deception. Google stated they are implementing stronger safeguards while pausing the feature. The company noted generated images were watermarked as AI-created.
- Google Earth AI tool pulled after spate of fake satellite images
Security experts say generative tools risk eroding trust in satellite images used to verify conflict damage and incidents
- Google Rolls Back Earth AI Tool Over Concern About Fake Images
Alphabet Inc.’s Google announced Friday that it will roll back its new AI image generation feature in Google Earth because some people were using it to create altered satellite imagery that appeared to violate the company’s policies.
- Google Earth risked ruin with retracted AI tool for making fake satellite pics
“What on earth is Google doing?” Misinformation fears spur walk-back of AI tool.
- Google nixes its Earth AI feature one day after launch, amid criticism it would spread misinformation
A tool that allowed anyone to generate fake AI-generated imagery and superimpose it over real Google Earth maps quickly spurred backlash.
- freebeat AI
Turn Music & Ideas into Viral Videos In One Click
- PixCosmos
Create and edit images and videos with AI all in one place.
- Alphabet rolls back AI image generation in Google Earth over policy violations
Alphabet rolls back AI image generation in Google Earth over policy violations Reuters
- Anthropic says its own AI models breached three companies during security tests
After OpenAI's models broke into Hugging Face, Anthropic checked its own history and found three similar incidents.
- ZindOps
Business Management & Real-Time Live Support Platform
- The Log
Pay-once markdown journal — your files, no subscription
- Serko AI
Your AI travel assistant that learns how you travel.
- Anthropic AI Models Hacked Three Companies During Tests
The breaches, which follow a similar incident involving rival OpenAI and startup Hugging Face, were due to a mistake, Anthropic said.
- RespondThat
AI that handles email, calls & WhatsApp, 24/7
- text2diagram
Turn plain English into diagrams instantly.
- Tritonix.ai
AI Trading Agent with an intelligent trading workflow
- Anthropic Says Its Models Also Hacked Outside Sites During Testing
Anthropic Says Its Models Also Hacked Outside Sites During Testing The Information
- Anthropic says its models went rogue and hacked 3 companies during testing
Anthropic says its models went rogue and hacked 3 companies during testing Business Insider
- ReqBrief
AI that interviews your client and writes the brief
- Moneion.com
Build production-ready apps with AI
- Anthropic’s Claude AI models hack into 3 outside groups during testing
Start-up discloses breach a week after rival OpenAI reported similar incident
- Seedeo
Seedeo
- trisAino
China, decoded.
- TheLogoCreator.AI
TheLogoCreator.AI
- Anthropic says Claude AI hacked three companies during cyber tests
Anthropic said a misconfiguration allowed Claude models to reach the internet from testing environments that were supposed to be isolated, leading to unauthorized access to three organizations' systems.
- DaVinci AI
DaVinci AI
- Ask the Grid
Live intelligence for the US power grid.
- ThreadOps
Your AI workforce that works 24/7
- TraceLLM
OpenTelemetry for production AI applications