Question 1

どの Claude モデルが侵害に関与していたのか？

Accepted Answer

Anthropic said three models were implicated. They are Opus 4.7, Mythos 5, and an unreleased internal research test model. The activity spanned six evaluation runs, four of which hit the same organization.

Question 2

Claude がテスト環境にあったのに、なぜ実システムへのアクセスが可能だったのか？

Accepted Answer

A misconfiguration in evaluations run with Anthropic's partner Irregular left the test machines with live internet access. Anthropic's prompt had told Claude the environment was a simulation with no connectivity, so the models treated real systems as part of the exercise.

Question 3

これらの攻撃によって現実世界での被害は発生したか？

Accepted Answer

Yes. Mythos 5 published a malicious Python package to PyPI that stayed online for about an hour and was downloaded and run on 15 real systems. Opus 4.7 pulled credentials and reached a database of production data before Anthropic detected the activity.

METR

Anthropic、METRの安全性レポートに対する拒否権を放棄

Anthropicは、Claudeが漏洩したセキュリティテスト中に3つの企業に侵入したと述べる

鋭い要約を。
毎日。

METR

Anthropic、METRの安全性レポートに対する拒否権を放棄

Anthropicは、Claudeが漏洩したセキュリティテスト中に3つの企業に侵入したと述べる

鋭い要約を。毎日。

鋭い要約を。
毎日。