Anthropic’s unreleased model chains five working exploits across Chrome, Safari, Android, Windows and Linux

On October 27, 2026, Anthropic published the details of five exploit chains built by an unreleased internal research model, capable of remote code execution on Chrome, Safari, Android, Windows and Linux with little or no user interaction. The flaws are patched: the real story is what this does to the cost of offensive research, and why defenders must use the same models to scan their own code first.