Logan Graham

This account is verified. Learn more

@logangraham

Head of the Frontier Red Team @anthropicai. 🌎 Make things radically good.

the present, moments ago logangraham.xyz Joined June 2009

9.1K Following 25K Followers 1.4K Posts

Latest posts 5

Logan Graham @logangraham 5d

my (brilliant) fiancée is starting to study AI from a moral psychology lens -- and is thinking about better evals for real-world decisionmaking.

If you want to build more/better model evals on topics like this / using good experimental designs, follow/ping!

Beth Anne Helgason Verified account @BA_Helgason 5d

Today, we’re releasing a dataset of >2k LLM conversations with real voters about the 2026 Midterms. We wanted to know how the ~millions of American who use AI models to talk about elections actually prompt them. Our hope is to use this data to build better evals for LLMs, to prepare for a world where most voters use AI to think through election decisions.

We observe that:
- People mostly want basic information
- Multi-turn chats follow predictable patterns
- Models differ widely in whether they’ll recommend candidates

View quoted post on X

Logan Graham @logangraham Oct 26

I think this story is important because it tells us about the future of cybersecurity (and of course what we can do better at Anthropic). But some of the Washington Post story / reaction on X is wrong. A few corrections:
- it didn’t take 12 hours. we saw several days of attempts. After these attempts, they exploited two 3rd party vulnerabilities, one they reported and the other we identified independently (and cut off access)
- nothing came close to our most sensitive systems, like model weights or Claude conversations
- this wasn't an ordinary bug bounty finding – this involved exploiting 3rd parties and accessing data. While this is unusual and out of scope of our safe harbor policy, we’re grateful these issues were found

From my researcher POV, the event is important because I'm concerned this is what the future will look like. Adversaries will use whatever models/tools they can. They’ll target everything with agents 24/7. They’ll hit your dependencies. I think models ~0.5-1 generations behind the current frontier can do this. And these are the dumbest models your adversaries will ever use!

So, what to do? You probably want to red team yourself all the time. Current models are *very* creative. I also think we should redesign software / systems so that you’re fundamentally less exposed. (We put out some research recently on formally verifying software and reducing attack surfaces; my mental model is basically “secure code is cheap to write now, so why not rewrite everything”)

Elizabeth Dwoskin Verified account @lizzadwoskin Oct 26

EXCLUSIVE: In less than 12 hours, a group of ex-DOGE cyber researchers were able to penetrate Anthropic’s systems using AI agents — including Slack channels where the most sensitive models are discussed.
This is just weeks after
Anthropic whistleblower Joseph Coxon charged the company w/launching “a hubristic gamble” from a “private company’s Slack.”
Read our story here (gift link):
wapo.st/4smNlsC
View quoted post on X

Logan Graham @logangraham Oct 23

step 1: find and fix all the bugs

step 2: rewrite the foundations of software to not have bugs in the first place

Proud of this work from @keenlooks and @theoremlabs and team. This is a glimpse of the direction we're going.

Anthropic Verified account @AnthropicAI Oct 22

New on our Frontier Red Team blog: using Claude to formally verify software at large scale.

Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).

With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.

Read our research in full here: anthropic.com/research/forma…
View quoted post on X

Logan Graham @logangraham Oct 19

Some updates on one of our initiatives to support OSS from the team behind it:

Punit Shah Verified account @thepunit Oct 19

11 days ago, our team @AnthropicAI launched OSS Scanner to give open source projects free, periodic vulnerability scans from our strongest models, inspired by OSS-Fuzz. Some numbers so far:
• ~650 projects applied
• 114 accepted
• 77 critical and 803 high model-rated findings reported (we haven’t scanned all projects yet)

How our reports ended up flagged as malware, and other learnings/updates below 🧵
View quoted post on X

Logan Graham @logangraham Oct 16

Going live to talk about worms (and cyber / autonomy / agents and whatever) in a bit here:

knower Verified account @knowerofmarkets Oct 16

MTS is LIVE - here's what we're talking about this morning:

- Gemini 4 Argon beats Minecraft
- China instilling new export controls on AI and other tech
- Taiwan planning $4 billion chip facility in Texas

Followed by some great interviews:

- @scottaar Professor at UT Austin talking about his recent writing and the rapid rate of AI capabilities growth in mathematics

- @logangraham Frontier Red Team lead at Anthropic talking about self-replicating AI and autonomous worms

- @RyanFedasiuk and @Satvik_Pen of AEI talking about their recent writing on AI chip restrictions and the race for chips

- @SamoBurja Founder of Bismarck Analysis talking about live v. dead players in AI

- @founderengineer co-founder of abliteration ai talking about building unrestricted ai

- Ahmad Osman founder @OsmanticAI talking about open models & the hardware needed to run it

- Suddu Head of Data and AI @Plaid talking about the company's latest breakthroughs in AI

- @BernAceituno co-founder of StackAI (acq. by Asana) discussing what it's like building capable enterprise agents

- @efarrellgregory Fellow at the Foundation for American Innovation talking about Sinomodernity

- Aden Barton head of evals @mercor talking about the company's latest report on the US economy

- Masumi Reynders co-founder and COO of Majestic Labs talking about the "memory wall" and what Majestic is working on
View quoted post on X