Anthropic

Every Claude Code release from v2.0.24 (October 20, 2025) through v2.1.89 (March 31, 2026) shipped a network sandbox that was trivially bypassable with a single null byte. If you ran Claude Code with a wildcard allowlist like *.google.com, any code executing inside the sandbox — whether through prompt injection, a malicious dependency, or a compromised repo — could reach any host on the internet by sending a SOCKS5 hostname like attacker-host.com\x00.google.com. The JavaScript allowlist filter saw the trailing .google.com and approved the connection; the OS resolver truncated at the null byte and dialed attacker-host.com. This is a parser-differential vulnerability in its purest form, and as of June 2026, it still has no CVE assigned to Claude Code itself. ...

On June 12, 2026 at 5:21 PM ET, the US Commerce Department ordered Anthropic to disable Claude Fable 5 and Mythos 5 for every foreign national on the planet — including foreign nationals working inside Anthropic’s own US offices. Anthropic had no real-time nationality verification in its API pipeline. Within 90 minutes, both models were offline for all users everywhere. No grace period. No migration window. No workaround. If you built any production workflow against claude-fable-5 during its 72-hour public window, your application broke that evening. ...

Claude’s Extended Output beta raises the max_tokens ceiling from 128K to 300,000 tokens — but only for requests sent through the Message Batches API. If you’re generating full codebases, book-length documentation, or exhaustive structured extractions in a single turn, this guide covers everything you need to get it working. What Is Extended Output and How Does It Work? Extended Output is a Claude API beta feature, activated via the anthropic-beta: output-300k-2026-03-24 header, that increases the maximum max_tokens limit per request from 128,000 to 300,000 tokens. As of June 2026, it is only available on the Message Batches API — the synchronous Messages API remains capped at 64K–128K depending on the model. The models that support extended output are Claude Opus 4.8, Opus 4.7, Opus 4.6, and Sonnet 4.6, all of which carry 1M-token context windows. Claude Fable 5 and Mythos 5 are explicitly excluded and remain at 128K output. A single 300K-token generation can take over an hour to complete, which is why the asynchronous batch architecture is a prerequisite. This is not a setting you flip on a chat endpoint — it’s a deliberate architectural tradeoff: accept latency, gain volume. The practical upside is book-length code scaffolds, full API documentation sets, and exhaustive data extraction jobs that previously required chaining multiple requests with fragile state management between them. ...

Claude Sonnet 5 is Anthropic’s mid-tier frontier model released February 3, 2026, scoring 82.1% on SWE-bench Verified — the highest coding benchmark score ever recorded at launch. It introduces Dev Team multi-agent mode, a 1 million token context window, and holds the same $3 per million input token price as its predecessor. For most development teams, it’s the most capable coding model available at a non-flagship price. What Is Claude Sonnet 5? (Fennec Model Overview & Release Details) Claude Sonnet 5 — internally codenamed “Fennec” after the large-eared desert fox — is Anthropic’s third-generation Sonnet model and the first AI model to break the 80% ceiling on SWE-bench Verified. It was officially released on February 3, 2026, simultaneously across the Anthropic API, Amazon Bedrock, and Google Vertex AI, with the identifier claude-sonnet-5@20260203 first spotted in Vertex AI deployment logs days before the announcement. The codename Fennec is not arbitrary marketing: it nods to the model’s 1 million token context window — metaphorically “large ears” for listening to entire codebases. Unlike Claude Opus 4.7, which targets deep multi-step reasoning at a premium price, Sonnet 5 is positioned as the workhorse model for engineering teams who need frontier-grade coding capability without flagship-grade cost. It replaced Claude Sonnet 4.6 as the default model for Claude Code Free and Pro users on launch day. The model runs on Google’s Antigravity TPU infrastructure, which Anthropic credits for the latency improvements over Sonnet 4.6. For API users, the migration path from claude-sonnet-4-6 to claude-sonnet-5 is a one-line model ID change — same tool format, same system prompt conventions. ...

Anthropic crossed a projected $2 billion in annualized revenue in early 2026, making it one of the fastest-scaling AI companies in history — and with that scale comes serious enterprise scrutiny. Security and compliance teams that greenlit Claude pilots are now being asked to sign off on production deployments handling PHI, financial data, and regulated EU personal data. The questions are specific: Does Anthropic hold SOC 2 Type II? Is there a HIPAA BAA? What exactly happens to data after an API call? This guide answers all of those questions with verifiable specifics, covers the compliance architecture across data handling, identity, and audit, compares Anthropic’s security posture against OpenAI, Microsoft, and Google, and provides a deployment framework security-conscious enterprises can adapt for their own Claude rollouts. ...

Claude Enterprise Security 2026: The Complete Compliance Guide Enterprise adoption of AI assistants accelerated sharply in 2025, and by Q1 2026, over 60% of Fortune 500 organizations have at least one large-language-model deployment in production. That pace has shifted the conversation from “should we use AI” to “how do we use AI without creating regulatory exposure.” Anthropic’s Claude Enterprise offering sits at the center of that shift, carrying SOC 2 Type II certification, HIPAA eligibility with Business Associate Agreements, GDPR-compliant data residency options, and a zero-day data-retention default that no major competitor matches out of the box. This guide is written for the security architects, CISOs, and IT leaders who need to move past marketing copy and evaluate Claude against concrete compliance requirements. Each section below covers a specific control domain — what Anthropic actually provides, where the gaps are, and what your team needs to configure before you can call a deployment production-ready. ...

Claude Mythos achieves 92% on SWE-bench Pro coding tasks — compared to 86% for Claude 3.5 Sonnet at its launch — representing a meaningful step up in autonomous software engineering capability. Early access developers report 40% productivity gains on complex programming tasks, and enterprise adoption is projected to reach 30% among Fortune 500 technology teams by end of 2026. Mythos is in developer preview as of mid-2026, accessible via the Anthropic Console for teams on the API with qualifying usage tiers. The model represents Anthropic’s next-generation architecture beyond Opus 4.7, with improvements in reasoning depth, code correctness, and multi-step agentic task completion. Here is what developers need to know before access broadens. ...

Claude Opus 4.7 is Anthropic’s most capable model as of April 2026, scoring 87.6% on SWE-bench Verified and introducing a redesigned thinking system that replaces manual budget_tokens with effort-based adaptive thinking. If you’re upgrading from Opus 4.6, four breaking API changes require code updates before your apps will run. What’s New in Claude Opus 4.7 Claude Opus 4.7, released April 16, 2026, represents a step-change in both coding capability and agentic architecture. The headline benchmark is SWE-bench Verified at 87.6% — up from 80.8% on Opus 4.6 — and SWE-bench Pro at 64.3% (up from 53.4%). On CursorBench, the real-world coding benchmark, Opus 4.7 scores 70% versus 58% for Opus 4.6. These gains come primarily from architectural improvements to multi-step reasoning: the model now plans across more steps before committing to an action, which matters most for complex debugging and refactoring tasks. Vision capability received an equally dramatic upgrade — visual acuity improved from 54.5% to 98.5%, and the model now supports 3.75MP images, three times the resolution of Opus 4.6. For computer use, Opus 4.7 scores 78.0% on OSWorld-Verified, the leading score among currently available models. Pricing stayed flat at $5/M input and $25/M output tokens, but a new tokenizer encodes the same text using up to 35% more tokens — so your actual bills will increase even without code changes. ...

Claude Code token costs add up faster than most teams expect. When you’re running Claude as an autonomous coding agent — letting it read files, write code, run tests, and iterate — a single task can easily consume 50,000–100,000 tokens. Multiply that by dozens of developers and hundreds of daily tasks, and you’re looking at real money. The good news: teams that implement the techniques below routinely cut their token consumption by 40–70% without sacrificing code quality. I’ve put these into practice across several production Claude Code deployments, and the cost reduction is consistent and measurable. ...

Anthropic’s 2026 Agentic Coding Trends Report landed differently than typical vendor white papers. Instead of marketing claims, it documented observed patterns from actual enterprise deployments — engineering teams where 89% adoption rates meant hundreds of AI agents operating internally, customers reporting that 27% of AI-assisted work was work that wouldn’t have been attempted without AI at all, and a shift in developer identity from “person who writes code” to “person who directs agents that write code.” Here’s a breakdown of all 8 trends with what they mean practically for development teams. ...