Here's yet another troubling story about this "golden" era of AI. A hacker has exploited Anthropic's Claude chatbot to carry out attacks against Mexican government agencies, according to a report by Bloomberg. This resulted in the theft of 150GB of official government data, including taxpayer records, employee credentials and more.

The hacker used Claude to find vulnerabilities in government networks and to write scripts to exploit them. It also tasked the chatbot with finding ways to automate data theft, as indicated by cybersecurity company Gambit Security. This started in December and continued for around a month.

It looks like the hacker was able to essentially jailbreak Claude with prompts, finally bypassing the chatbot's guardrails. Claude originally refused the nefarious demands until eventually relenting.

"In total, it produced thousands of detailed reports that included ready-to-execute plans, telling the human operator exactly which internal targets to attack next and what credentials to use," said Curtis Simpson, Gambit Security’s chief strategy officer.

Anthropic has investigated the claims, disrupted the activity and banned all of the accounts involved, according to a company representative. The spokesperson also said that its latest model, Claude Opus 4.6, includes tools to disrupt this kind of misuse.

It's also been reported that this hacker used ChatGPT to supplement the attacks, using OpenAI's chatbot to gather information on how to move through computer networks, determine which credentials were needed to access systems and how to avoid detection. OpenAI says it has identified attempts by the hacker to violate its usage policies and that the tools refused to comply.

The hacker remains unidentified. The attacks haven't been attributed to a specific group, but Gambit Security did suggest they could be tied to a foreign government. It's also unclear what the hacker wants to do with all of that data.

Mexico's national digital agency hasn't commented on the breach, but did note that cybersecurity is a priority. The state government of Jalisco denies that it was breached, saying only federal networks were impacted. However, Mexico's national electoral institute also denied any breaches or unauthorized access in recent months. It's worth noting that Gambit found at least 20 security vulnerabilities during its research that the country is likely not keen on highlighting.

This isn't the first time Claude has been used for a major cyberattack. Last year, hackers in China manipulated the tool into attempting to infiltrate dozens of global targets, several of which were successful. Anthropic just nixed its long-standing safety pledge, which committed to never train an AI system unless it could guarantee in advance that safety measures were adequate. So who knows what fresh hell the future will bring as the company's tools become more advanced.

This article originally appeared on Engadget at https://www.engadget.com/ai/hacker-used-anthropics-claude-chatbot-to-attack-multiple-government-agencies-in-mexico-171237255.html?src=rss

Ring CEO Jamie Siminoff has indicated that the company's controversial Search Party feature might not always be just for lost dogs, according to emails obtained by 404 Media. A creepy surveillance tool being used to surveil. Who could have predicted that?

"I believe that the foundation we created with Search Party, first for finding dogs, will end up becoming one of the most important pieces of tech and innovation to truly unlock the impact of our mission," Siminoff wrote in an email to staffers. "You can now see a future where we are able to zero out crime in neighborhoods. So many things to do to get there but for the first time ever we have the chance to fully complete what we started."

The words "zero out crime in neighborhoods" are particularly troubling. It is, however, worth noting that this is just an email and doesn't necessarily indicate a plan by the company. Siminoff wrote the email back in October when Search Party first launched, which was months before the public backlash started. He did end the thread by noting he couldn't "wait to show everyone else all the exciting things we are building over the years to come."

One of those things could be the recently-launched "Familiar Faces" tool, which uses facial recognition to identify people that wander into the frame of a Ring camera. It seems to me that a combination of the Search Party tech, which uses the combined might of connected Ring cameras, with the Familiar Faces tech could make for a very powerful surveillance tool that excels at finding specific individuals.

Siminoff also suggested in an earlier email to staffers that Ring technology could have been used to catch Charlie Kirk's killer by leveraging the company's Community Requests feature. This is a tool that allows cops to ask camera owners for footage, thanks to a partnership with the police tech company Axon.

Ring had planned an expansion of this program via a partnership with a surveillance company called Flock Safety. The companies canceled this partnership after a Super Bowl ad spotlighting the Search Party tool triggered public outcry. Ring didn't cite public sentiment for this decision, rather saying the integration would require "significantly more time and resources than anticipated."

Ring has responded to 404 Media's reporting, saying in an email that Search Party "does not process human biometrics or track people" and that "sharing has always been the camera owner's choice." This response did not provide any information as to what the future will hold for the company's toolset.

The organization has been friendly with law enforcement since inception. "Our mission to reduce crime in neighborhoods has been at the core of everything we do at Ring," founding chief Jamie Siminoff said when Amazon bought the company for $839 million back in 2018. 

This article originally appeared on Engadget at https://www.engadget.com/big-tech/ring-could-be-planning-to-expand-search-party-feature-beyond-dogs-175805706.html?src=rss