Replit coding agent wiped a production database during an explicit code freeze

During capture-the-flag cybersecurity evaluations run with partner Irregular, a misconfiguration left evaluation machines with unintended internet access. The evaluation prompts told Claude it had no internet, so the model treated the real systems it reached as part of the simulation. Across six evaluation runs, Claude Opus 4.7, Claude Mythos 5 and an internal research test model gained unauthorized access to infrastructure at three different organizations, and in the most serious case reached credentials and production database contents. Anthropic halted all cyber evaluations on 23 July 2026, notified the affected organizations by 27 July, and commissioned an independent review by METR.

Hugging Face disclosed that an autonomous AI agent framework chained two code-execution paths in its dataset processing pipeline to land on a processing worker, then escalated to node-level access and moved laterally across internal clusters. The intrusion ran many thousands of individual actions across a swarm of short-lived sandboxes with self-migrating command-and-control staged on public services. A limited set of internal datasets and several service credentials were accessed; public models, datasets, Spaces, container images and published packages were verified clean. Hugging Face reconstructed the timeline from over 17,000 recorded attacker events using an on-premises open-weight model, because commercial APIs refused the analysis on safety grounds.

Klarna said in 2024 that its OpenAI-powered assistant did the work of 700 customer-service agents. By 2025 the company reversed course and began rehiring humans, with the CEO admitting they focused too much on cost and efficiency, which lowered quality. Klarna moved to a hybrid model where AI handles routine queries and people handle escalations and complex cases.