Weeks ago, I found that Anthropic’s Fable 5 was more than willing to help users commit cybercrime—planning and actively exploiting (albeit somewhat known) vulnerabilities against IoT devices all over the internet. Extremely basic prompt engineering was all it took to bypass the guardrails.
These aren’t sophisticated 0days but they’re still real vulnerabilities. Anyone motivated enough can find and exploit them. The issue is that Fable 5 in the Claude Code or Cursor agent harness removes the skill floor and helps a complete imbecile carry out these attacks…at a scale and speed we’ve never seen before, even from a state-sponsored actor, well, except maybe Fancy Bear. against anyone, anywhere. Human effort and time used to be a meaningful deterrent. That’s gone now. Yay /s