THIS IS F*CKING INSANE.
Anthropic's Frontier Red Team pointed one unreleased Claude at five operating systems and got a working exploit chain for every one of them.
the kill list:
> Linux: zero-click remote root, CVE-2026-98432, CVSS 9.8
> Chrome: one-click sandbox escape using four V8 bugs, patched in Chrome 156
> Safari: full exploit chain
> Pixel 9: locked device compromised over USB
> Windows QUIC: CVE-2026-33096
Every one was reported to the vendor before Anthropic published. That is the only reason this reads like a Red Team paper and not a breach report.
the detail changing the frame:
The model behind this is an unreleased research build, not any Claude product customers can use today. The Frontier Red Team's job is finding what the next model can do before customers can.
the signal is the chain, not any single CVE:
One model, five full exploit chains, five different threat surfaces. That used to be months of senior offensive work per OS. One eval run just compressed it.
Teams with early access to this class of model will find vulnerabilities before vendor blue teams can patch them. Patch cycles are now in a race with eval cycles.
full disclosure from Anthropic's Frontier Red Team is in the article below. this is the week offensive AI stopped being theoretical.
This is f**king gold.
Someone just posted the full spec sheet for the AI agent nobody has shipped yet, and every piece already exists in a different company.
the dream list, decoded against what ships today:
> Opus 5.5-level reasoning that never falls back to a weaker model = Anthropic
> Dots-level real-time voice and tool use = OpenAI, shipped late September
> Codex-level computer use on your local machine = OpenAI
> Artifacts-quality decks, docs, design = Anthropic
> Duet mobile UI = Anthropic, shipped October 22
> Inline mini-apps across email, Slack and more = xAI's Grok Bot
> Webhooks on the agent = xAI's Grok Bot
> Social access across every platform = still nobody
That is six vendors in one wishlist. Opus for brains. Dots for voice. Codex for local computer use. Artifacts for output. Duet for mobile. Grok Bot for inline and webhooks.
the reason this agent does not exist as one product:
Nobody wants to be the integration layer. Every lab wants to own the full stack. Being the glue is the lowest-margin seat at the table and the fastest way to get replaced the quarter a frontier lab extends into your lane.
the stitch that already works today, if you set it up:
Claude Code with the right MCP servers glues most of this on desktop. Grok Bot handles the inbox and Slack side. Duet handles the mobile side. The seams are visible, but the pieces talk.
the one thing on the list that no vendor has shipped: an agent that organizes its own work into channels, so a week of its output fits in one scroll.
full breakdown of the stitch job is in the article below. the agent you want is a few MCP servers away from existing.
This is going to hurt. Free. Phone. $0. You can ship a 60-second animated short tonight using only free-tier AI tools. Most people pay for one of these when the free tier of the next one would do the job.
the free pieces, as of this week:
> PixVerse AI. Web + iOS + Android. 30 daily credits free. Image-to-animation, 540p, watermark.
> Hailuo 2.3 by MiniMax. Web + mobile app. Daily free credits for expressive character motion.
> Kling 3.0. Web. 66 credits per day, they expire each day. Longer action shots.
> Pika 2.5. Web. 80 credits per month at 480p, no watermark.
> ElevenLabs. 10,000 character voice credits per month, non-commercial, attribution.
the free stack that actually ships a short:
> write the script in Claude or ChatGPT free tier
> generate character stills with Google ImageFX or Bing Image Creator
> animate the stills in PixVerse or Hailuo on your phone
> extend scenes with Kling and Pika on the browser
> add voice and SFX in ElevenLabs
> stitch in CapCut, also free, also on your phone
the one gotcha: Kling credits reset daily, Pika credits reset monthly. If you plan a 60-second short across 4 scenes, you spread the generation across two days or burn credits waiting for a scene to re-roll.
three years ago this short cost $300 in licenses and a laptop. tonight it costs the time to install five apps on your phone.
the full tool list and the step-by-step is in the article below. the only skill left to buy is taste.