Illustration, AI-generated from the story text. Tap a panel to enlarge.
Anthropic says an unreleased model built working exploits for Chrome, Safari and Linux
Anthropic's Frontier Red Team published five exploit chains on Tuesday, written by what it calls an unreleased internal research model with "little human involvement." The Chrome chain ran code outside the browser from a single click; Google assigned 62 CVEs to the work, all rated critical or high and patched as of Chrome 156, including 13 sandbox escapes A. The Safari chain bypassed the same-origin policy and exposed cookies and history. The Linux one is a remote root in the 's multipath TCP code, which the proof of concept reached in about 53 minutes A. Every flaw was reported to the vendor first and is fixed, Anthropic says.
The Hacker News checked the credits and found gaps. Google and Apple credit Anthropic researchers "with Claude," but the Windows describes a different component than Anthropic's account, and the Linux CVE's public text describes an IPv4 TCP fix rather than multipath TCP B. Anthropic does not break down how much human work went into each chain. The model itself is not available; Anthropic points security professionals to its Cyber Verification Program instead. SourcesAB
Sources
- ADiscovering vulnerabilities with Claude (Anthropic)anthropic.com
- BAnthropic's unreleased AI model chains flaws into working exploits (The Hacker News)thehackernews.com
This story ran in the Afternoon Brief of October 28th 2026.