started · updated
Anthropic research model develops functional exploits for major operating systems
An unreleased Claude research model developed functional exploit chains for Chrome, Safari, Android, Windows, and Linux, according to a report by Anthropic’s Frontier Red Team. The research, published on October 27, 2026, demonstrated how AI can autonomously identify vulnerabilities and chain them to execute complex cyberattacks in a laboratory setting.
Key findings include a Chrome exploit chain that bypasses the browser sandbox to execute code, and a Safari chain capable of bypassing the same-origin policy to access sensitive user data like cookies and browsing history. In Android testing, the model successfully extracted photos and personal data from a locked Google Pixel 9 via USB. For Linux, the model exploited a critical kernel flaw (CVE-2026-98432) to obtain root shell access in approximately 53 minutes.
All identified vulnerabilities were reported to the respective vendors and have been patched. Google addressed the Chrome vulnerabilities in version 156, and Apple released fixes for the Safari and iOS/iPadOS flaws. The research aims to use AI to strengthen software defenses through formal verification.
Entities
Anthropic · Apple · Chrome · Claude · Google · Linux · Microsoft · windows
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 4 SOURCES] Google assigned 62 CVEs related to the Chrome vulnerabilities identified by the model. www.ithome.com · android-mt.ouest-france.fr · diarioti.com
- [● 2 SOURCES] The model extracted photos and personal data from a locked Google Pixel 9 via USB. www.ithome.com
- [● 2 SOURCES] The model obtained root shell access on Linux in approximately 53 minutes. www.ithome.com · cybernoz.com
- [● 5 SOURCES] All identified vulnerabilities were reported to vendors and have been patched. jornal24horas.com.br · www.ithome.com · android-mt.ouest-france.fr · cybernoz.com · diarioti.com
- [● 5 SOURCES] An unreleased Anthropic research model developed functional exploit chains for Chrome, Safari, Android, Windows, and Linux. jornal24horas.com.br · www.ithome.com · android-mt.ouest-france.fr · cybernoz.com · diarioti.com
- [● 3 SOURCES] The model bypassed the same-origin policy in Safari to potentially access sensitive user data. www.ithome.com · diarioti.com
- [● 5 SOURCES] The Chrome exploit chain allowed code execution outside the browser sandbox. jornal24horas.com.br · www.ithome.com · android-mt.ouest-france.fr · diarioti.com