Claude Model Builds Exploits Across Major Browsers & OSes

An unreleased version of Claude identified critical vulnerabilities in some of the world's most widely used browsers and operating systems and chained them into working exploits requiring little or no human interaction, Anthropic said this week. The exploits included one that enabled data theft from a locked Android smartphone, another zero-click exploit allowed remote code execution (RCE) with root privileges on Linux servers, and a third that could have allowed attackers to remotely crash Windows systems. In total, Anthropic said, the model generated five working exploits targeting Chrome, Safari, Android, Windows, and Linux. All affected vendors have addressed the vulnerabilities after Anthropic reported them. The exploits are the latest evidence that frontier AI models are moving beyond simply identifying individual flaws to combining multiple into sophisticated working exploits. "These attack chains demonstrate the model's ability to create sophisticated, multi-step exploits in both open-source and proprietary software," Anthropic's Frontier Red Team said in a blog post this week. Historically, creating such chained exploits would have required special teams with domain expertise, the researchers wrote. "Now, it's something models can do with little human involvement, and then prove by producing a working exploit that anyone can run and verify." Anthropic's report described a one-click RCE exploit chain involving Chrome on macOS. The exploit combined four vulnerabilities...