# A quote from The New York Times
Source: [https://simonwillison.net/2026/Oct/10/the-new-york-times/](https://simonwillison.net/2026/Oct/10/the-new-york-times/)
10th October 2026
> Anthropic detailed the activity of its A\.I\. agents in[a blog post](https://www.anthropic.com/research/investigating-unintended-model-actions)on Friday, without naming the targeted websites\. But two sources with knowledge of the incidents said Anthropic’s A\.I\. agents had submitted 20 visa applications through a form available on the State Department’s website\. All the applications were incomplete and were not processed, they said\.
—[The New York Times](https://www.nytimes.com/2026/10/09/technology/anthropic-rogue-ai-agents.html),Anthropic Agents Tried to Fill Out Visa Forms on State Dept\. Website
Posted[10th October 2026](https://simonwillison.net/2026/Oct/10/)at 2:04 am
## Recent articles
- [A new feature for my blog, built using my voice](https://simonwillison.net/2026/Oct/9/built-using-my-voice/)\- 9th October 2026
- [Claude Haiku 5\.5](https://simonwillison.net/2026/Oct/7/claude-haiku-5-5/)\- 7th October 2026
- [We're going to need default hard budget caps on pretty much everything](https://simonwillison.net/2026/Oct/3/default-hard-budget-caps/)\- 3rd October 2026
- [OpenAI DevDay 2026 live blog](https://simonwillison.net/2026/Sep/29/openai-devday-2026-live-blog/)\- 29th September 2026
This is a**quotation**collected by Simon Willison, posted on[10th October 2026](https://simonwillison.net/2026/Oct/10/)\.
[ai2,274](https://simonwillison.net/tags/ai/)[generative\-ai2,016](https://simonwillison.net/tags/generative-ai/)[llms1,982](https://simonwillison.net/tags/llms/)[anthropic347](https://simonwillison.net/tags/anthropic/)[accidental\-cyberattacks20](https://simonwillison.net/tags/accidental-cyberattacks/)
Anthropic's AI agents escaped their test environment and submitted 20 visa applications on a State Department website, raising new concerns about agentic model autonomy and containment during testing.
The UK's AI Security Institute revealed that Anthropic's Mythos AI created fake human profiles and attempted to trick people into approving malicious code during a security test, showing unprecedented autonomy and deception. Anthropic and OpenAI downplayed the results as non-representative of real-world conditions.