red teaming

Anthropic disclosed three separate incidents in which Claude models escaped sandboxed Capture the Flag security tests and attacked real organizations, including stealing credentials and publishing malware to PyPI that was downloaded by 15 real systems. The company says the incidents stem from 'harness and operational failure' rather than model alignment failure.