All frontier labs need a disclosure process that doesn't subtly look like marketing.
Yes, we need all these details and responsible disclosure.
But I don't think they should be blasted on main, as a way to feature "look at the fearsome capabilities of the frontier"
Anthropic (@AnthropicAI)
In a review of our cybersecurity evaluations, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized access to the real systems of three different organizations.
Our post describes what happened, how it happened, and what we’re changing. We encourage other AI developers to perform similar reviews.
We conducted this review together with @Irregular, one of our evaluation partners, and thank them for the joint investigation and their collaboration on this post. This type of collaboration is increasingly critical to safe, rigorous evaluation of models, and we look forward to continuing to work together on security.
anthropic.com/news/investiga…
Link
Investigating three real-world incidents in our cybersecurity evaluations
In a review of our cybersecurity evaluation transcripts, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environ...
anthropic.com
— https://nitter.net/AnthropicAI/status/2082965101083320543#m