Excuse me? What happened to the mythical cybersecurity abilities of Claude Mythos? Physician, cure thyself!
Anthropic has not informed customers, and the malicious version was silently deleted the backdoored version without telling anybody.
Now we see Anthropic's attitude towards security when the incident does not make for good marketing. Also, considering Binance was just hacked for a massive $3B in stablecoins, and this backdoor allowed remote access to developer laptops, I have a feeling these things are connected. If that is true, then this is by far the worst cybersecurity incident involving AI, worse than even the much ballyhooed PHP2Shell.
Edit: From Molly White's article
Binance later wrote that their "initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop", which allowed an attacker to “submit unauthorized withdrawal transactions.”
Okay, now I am really suspicious that these things are connected.