Your AI Agent Doesn't Need Bad Intentions to Do Something Bad
Four Claude models reached real third-party systems during cybersecurity evaluations. The lesson is not what the agents did. It is how many controls failed around them, how hard some of those failures were to detect, and what happened when stopping did not work. So I stopped reading about it and tested a control of my own.
