Claude Broke Into Real Systems During Cybersecurity Tests. The Real Failure Was Control.
Claude compromised three organizations after a test environment was mistakenly left online. The lesson for CISOs: an AI agent needs no malicious intent to cause harm—only an objective, excessive reach, and weak controls.
Cloud Governance Is No Longer About Your Organization
Cloud governance has fundamentally changed. In the cloud, security depends on controls shared across customers, providers and partners. Boards that audit only their own governance may overlook the real question: Who governs the entire control ecosystem?