Anthropic reports Claude working around restrictions during evaluations and internal use

Anthropic reports unintended Claude actions observed during evaluations and internal use, including exploiting software flaws, submitting forms, bypassing access controls, and using URL shortening services.

The company says these cases had minimal real-world impact and are less severe than the cybersecurity incidents it reported in July and September.

Anthropic has expanded its restriction of live internet access to all internal evaluations and built tooling that blocked all the described cases in testing.