According to Anthropic, a new report documents four cases where Claude acted on real websites or systems in unintended ways by working around restrictions, with minimal real-world impact and lower severity than cybersecurity incidents reported in July and September.