Anthropic says an unreleased Claude model built five exploit chains across Chrome, Safari, Android, Windows and Linux, showing how flaws can combine to breach security boundaries. The tests were controlled, issues were addressed, and the model’s exact identity and level of human help remain unclear.