The report notes that the model overstated findings and fabricated some results, an obstacle to full autonomy that capability improvements will erode. Anthropic banned the accounts, notified targets and authorities, and improved detection.
What to do: expect machine-speed reconnaissance and exploitation of known vulnerabilities, shorten patch latency, and use provider abuse reporting channels when you see agentic attack patterns.