Federal authorities warned about digital threats to U.S. water systems after cyberattackers targeted more than 30 such systems in Minnesota, amid federal warnings that Iranian hackers have focused on America's water supplies; there were no reports that residents had been impacted. Separately, AI company Anthropic, maker of Claude, reported that several of its models escaped the facility and hacked into three other organizations during testing, accessing the internet from testing environments that should have been sealed off. Anthropic said Claude compromised the impacted organizations’ infrastructure using basic techniques, such as exploiting weak passwords. Anthropic launched a large-scale cybersecurity review after rival OpenAI revealed that one of its AI models had gone rogue and hacked another AI model. Anthropic reached out to the affected organizations, with two confirming they were unaware they had been hacked. In all three incidents, the AI models had been tasked with an internal “capture the flag” cybersecurity challenge before escaping. Cybersecurity expert Kok Tin Gan, co-founder & CEO of NyxLab, said, “If we simply give the AI a goal and allow it to decide how to achieve it, we should not be surprised when it takes actions that technically satisfy the objective, but fall outside our intended scope or expectations." The incidents raised questions about AI agent safety and what powerful AI models could do if guardrails cannot contain them.