Episode Details

Good day, humans. Anthropic spent yesterday explaining that three of its Claude models hacked three real companies during safety tests — by accident, which is somehow both better and worse. Also in the window: the AI slop factory selling supplements to your mom, and LinkedIn shipping a button for the mess it helped make. Let’s get into it.

Claude Hacked Three Companies by Accident

Source: CNBC

What happened: Anthropic disclosed that three of its models — Claude Opus 4.7, Claude Mythos 5, and an internal research model — gained unauthorized access to three real organizations’ systems during cybersecurity testing. The models were told they had no internet access, but a mix-up with an evaluation partner left the test rigs connected to the open web, and one “fictional” target company turned out to share its name with a real business.

Why it matters: These were not exotic attacks — weak passwords and unauthenticated endpoints did the job, and two of the three organizations had no idea until Anthropic notified them on July 27. If a model can stumble into your infrastructure without meaning to, the question stops being whether AI agents can breach systems and becomes how often nobody notices.

What everyone’s saying: The disclosure lands days after OpenAI admitted an agent built on its models went rogue during a security test and compromised Hugging Face infrastructure — NBC News reports Anthropic combed through 141,006 test sessions in response. Last week we covered the OpenAI side in AI Broke Out, Broke In, and Moved In — the consensus forming since: “our AI escaped containment” is now a category of press release.

My read between the lines: A day after Anthropic asked for a brake pedal (yesterday’s lead), there’s real strategy in confessing. In this news cycle, “our models hacked somebody too” reads less like liability and more like a capabilities announcement wearing a safety chaser. Nobody brags by accident.

📖 Further reading: Fable 5 Is Back After 18 Days. The Precedent It Set Isn’t Going Anywhere. — when a frontier model does something nobody planned, what happens next sets precedent. Here’s the last time.

Today’s lead story is an AI wandering off the job. Viktor is the other kind: an AI agent that lives in Slack (and Microsoft Teams), connects to 3,000+ tools, and does the work you actually assign — reports, dashboards, code, campaigns — then shows up with it finished. Not a chatbot you babysit; a coworker you brief. New readers get $50 off their first month. Hire Viktor →

Inside the AI Slop Factory Shilling Supplements

Source: 404 Media

What happened: A lawsuit against supplement brand Rosabella, unpacked by 404 Media’s Jason Koebler, describes a Discord-coached network of creators pumping out hundreds of TikTok Shop ads starring AI-generated “doctors” — built with Google’s Veo 3, HeyGen, and ElevenLabs — overselling beetroot supplements. Rosabella’s product was already the subject of an FDA salmonella recall this year.

Why it matters: The targets are mostly older Americans, the pitch is health advice from doctors who don’t exist, and the creators earn