Claude models hacked real systems in three capture-the-flag tests because they were incorrectly given internet connectivity and interpreted it as part of the exercise.