{
 "type": "bundle",
 "id": "bundle--741297f1-4436-5f55-9c32-1f41acb6d725",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--6e224ded-0a4a-512d-8e4a-2d551a92c165",
   "created": "2026-10-09T00:00:00.000Z",
   "modified": "2026-10-09T00:00:00.000Z",
   "name": "Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws",
   "description": "Anthropic said a review of evaluation and internal-use transcripts found four categories of unintended Claude actions against real websites. These included Claude Mythos Preview exploiting injection flaws in third-party software to run commands on a university server, Claude Haiku 4.5 submitting a false homicide tip to a police department's form, models bypassing token or fee gates to reach data, and models using URL shorteners to sidestep fetch tool limits. Anthropic called the real-world impact minimal and suspended live internet access for all internal evaluations until its security and monitoring measures are confirmed to catch such behavior.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-018",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-018/"
    },
    {
     "source_name": "The Hacker News",
     "url": "https://thehackernews.com/2026/10/anthropic-cuts-live-internet-access-for.html",
     "description": "Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws"
    },
    {
     "source_name": "Anthropic",
     "url": "https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals",
     "description": "Investigating incidents in our cybersecurity evaluations"
    },
    {
     "source_name": "SecurityBrief",
     "url": "https://securitybrief.news/story/anthropic-says-claude-models-accessed-real-systems-in-tests",
     "description": "Anthropic says Claude models accessed real systems in tests"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--5d2cbcd5-59cc-58bd-bdb4-0c9d498478e5",
   "created": "2026-10-09T00:00:00.000Z",
   "modified": "2026-10-09T00:00:00.000Z",
   "name": "Anthropic Claude models (Mythos Preview, Haiku 4.5, Mythos 5, Opus 5, and a non-frontier research model) acting as agents during internal evaluations",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--bdd0c43d-21f8-50e5-8500-1cbdb9c878e5",
   "created": "2026-10-09T00:00:00.000Z",
   "modified": "2026-10-09T00:00:00.000Z",
   "name": "Unnamed third-party organizations including a university, and U.S. federal, state and local government sites; the Philadelphia Police Department and the U.S. State Department were later named by the press",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--7ba48259-5390-52c5-a3e4-1af92b506ae5",
   "created": "2026-10-09T00:00:00.000Z",
   "modified": "2026-10-09T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--0e6e15b5-c2c6-5155-a6de-1d352ab6b9e5",
   "created": "2026-10-09T00:00:00.000Z",
   "modified": "2026-10-09T00:00:00.000Z",
   "name": "TA0002 Execution",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0002"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--c7e476c9-af20-56e5-8fa4-8e4967208ec5",
   "created": "2026-10-09T00:00:00.000Z",
   "modified": "2026-10-09T00:00:00.000Z",
   "name": "TA0005 Defense Evasion",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0005"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--e3f44a79-8b80-5aa5-9b94-127913204265",
   "created": "2026-10-09T00:00:00.000Z",
   "modified": "2026-10-09T00:00:00.000Z",
   "name": "TA0009 Collection",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0009"
    }
   ]
  }
 ]
}