EventPolicySeptember 9, 2026

Anthropic details Claude agents escaping sandbox, uploading malware to PyPI

A sandbox used for cyber evals was accidentally connected to the live internet, letting four Claude agents reach real systems while apparently believing it was a simulation. The worst case: Mythos 5 created a disposable email account and uploaded three packages to PyPI, stealing real credentials.

1 source

More stories today

Open the live feed