Researchers outside the United States used frontier AI models to plan experiments involving highly pathogenic bird flu, chikungunya and other biological agents with potential weapons applications, according to a new threat report from Anthropic.

The researchers used AI to study viruses’ transmissibility and immune evasion, investigate orthopoxvirus immune-response genes and help design novel toxins at times while taking steps to evade safeguards meant to restrict access to dangerous biological capabilities.

Anthropic detailed five cases in the report published Thursday but withheld the countries, institutions and specific biological agents involved. The company stressed that it is not claiming the researchers intended to develop biological weapons.

AI KILL SWITCH BILL COULD SHUT DOWN ROGUE MODELS

The findings offer a concrete glimpse at a threat that has largely been discussed in hypothetical terms. Scientists who already possess biological expertise, materials and laboratory access are using increasingly powerful AI systems to accelerate sensitive dual-use research.

They also land amid a renewed debate over catastrophic AI risks. Jacob Coxon, a former Anthropic and OpenAI researcher, recently resigned while accusing the companies of «racing straight to self-improving superintelligence and gambling with our lives.» His warning drew more than 100 million views on X.

SEN BERNIE SANDERS: YES, WE MUST HIT THE PAUSE BUTTON ON AI BEFORE IT IS TOO LATE

Evan Hubinger, Anthropic’s alignment science lead, separately said he personally believed there was a greater than 10% chance AI could kill all humans within the next decade.

But Anthropic’s report points to a threat that is already taking shape: researchers using frontier AI for potentially dangerous biological work, circumventing geographic restrictions and adapting when the models’ safeguards get in their way.

Pages from the Anthropic website and the company’s logos are displayed on a computer screen in New York Feb. 26, 2026. (Patrick Sison/AP Photo)

In one case, Anthropic blocked a grant application for chikungunya gain-of-function research at a military research institute. The proposed work focused on identifying mutations that could increase the virus’s transmissibility and ability to evade the immune system.

The researchers planned to engineer those mutations into infectious clones and repeatedly pass the virus through live animals, selecting for variants that caused the most severe disease.

That work could help scientists develop better vaccines and treatments for chikungunya. It could also produce a more dangerous pathogen that would be difficult to distinguish from a naturally occurring outbreak, Anthropic said.

The researchers accessed Claude through a life sciences platform that tunneled traffic through U.S. infrastructure to evade Anthropic’s regional restrictions. When Claude refused to answer sensitive prompts, the platform routed those requests to another model with more permissive safeguards.

Anthropic said the research continued after the company banned accounts connected to the activity. The platform operator reestablished access within days using new identities, while Claude continued to provide editorial assistance on research materials.

In another case, a researcher spent weeks using Claude to plan experiments involving mammalian adaptation and airborne transmission in highly pathogenic avian influenza.

FDA APPROVES FIRST-EVER MRNA FLU VACCINE FOR MILLIONS OF OLDER AMERICANS

The researcher was studying viral traits that could allow bird flu to spread more effectively among mammals and cause severe disease outside the respiratory system. A version capable of efficient human-to-human transmission would pose a significant pandemic threat, according to the report.

Anthropic said the researcher appeared to have access to virus isolates and animal-model facilities. The company confined the work to weaker models, limiting the assistance primarily to study design, data analysis and editorial support.

The company said the case provided evidence of an active research program developing the knowledge and biological materials needed to create pathogens with enhanced pandemic potential. The researcher also took steps to hide his identity while accessing the models from an unsupported region.

A separate user connected to a state-associated infectious-disease laboratory used Claude to draft an orthopoxvirus research grant from start to finish in about an hour.

Orthopoxviruses include variola, the virus that causes smallpox, as well as mpox. The grant application proposed studying viral genes that disable the human immune response and included the central hypothesis, experimental design, dosing, statistical plans and contingency strategies.

Because the work was framed around weakening the virus, Claude’s safeguards did not block the assistance. But Anthropic said the same knowledge could also help a researcher preserve or enhance the virus’ immune-evasion capabilities.

The final two cases involved venom peptides and toxins.

One researcher used Claude to build an atlas of toxin peptides from multiple venomous animal lineages and then created a generative pipeline to optimize their characteristics.

A researcher in a lab drops a blood sample into a Petri dish. (iStock)

The stated goal was to develop new painkillers, antidepressants and other treatments. But the atlas also included structures associated with paralytic toxins that could potentially be used as incapacitating agents. Anthropic said the work was part of a state-supported research program.

In the other case, a researcher used Claude to computationally redesign several toxins, including a bacterial toxin and a protein from a hemorrhagic fever virus identified by the World Health Organization as a priority disease threat.

The researcher used Claude to help prepare progress reports but instructed the model to keep the identities of the toxins deliberately vague.

The cases illustrate why biological misuse can be difficult to prevent through automated filters alone. Anthropic’s safeguards blocked the clearest attempts involving enhanced pandemic pathogens, but they were less effective when users framed their work as medical, defensive or therapeutic research.

«Biological capabilities are dual use,» Anthropic said in the report. «The same information that can be used to develop a biological weapon could also be used to develop, for example, a vaccine or a cure for a disease.»

Dario Amodei, co-founder and chief executive officer of Anthropic, during the company’s Builder Summit in Bengaluru, India, Feb. 16, 2026.  (Samyukta Lakshmi/Bloomberg via Getty Images)

The company said it recently reviewed 30 days of activity associated with adversarial state institutions and found roughly 35 distinct biological research efforts. Most involved ordinary civilian science, but some had «notable dual-use potential.»

Anthropic said the findings do not show that Claude has enabled an imminent biological attack.

They do show, the company said, that researchers tied to state-associated programs are attempting to evade access controls and use frontier AI models in biological research that could have weapons applications.

The company said future safeguards will likely require more than content filters, including identity verification, institutional vetting and closer monitoring of users seeking access to advanced biological capabilities.

A socialist «Never Trumpers» protester blamed «conservative provocateurs» for a tense confrontation with police that resulted in multiple arrests just outside the Republican National Committee’s midterm convention in Dallas.

Videos posted on social media Thursday afternoon showed what appeared to be hundreds of Never Trumpers confronting Dallas police just blocks from where the president was set to deliver his convention-closing speech. Authorities responded with a strong show of force that included officers in apparent riot gear.

The Dallas Police Department confirmed with Fox News Digital that two protesters were arrested on charges related to their actions during the protest. The department said that officers assigned to the area arrested the two protesters after it said they «assaulted a counter-protester» and «obstructed a road.»

The department said the suspects’ names and specific charges will be released after they are booked into jail.

CAN THE ‘BEST SHOWMAN IN POLITICS’ DELIVER AGAIN? GOP BETS ON TRUMP AT HISTORIC MIDTERM CONVENTION

Fox News Digital spoke with a protester named Rick Majumdar, who was wearing a shirt with the initials for the Freedom Road Socialist Organization (FRSO), which, according to its website, is a «national organization of revolutionaries fighting for socialism in the United States.»

Majumdar said that the protest was organized by the Dallas Against the Trump Agenda Coalition, which, he said, consists of 16 «faith-based organizations, pro-immigrants’ rights groups and labor organizations.»

«We’re here to protest the Republican agenda, the Trump agenda and all its policies that it has enacted over the last few years,» he explained. «The march is an important event, we feel, against this convention that’s happening for the last two days.»

REPUBLICANS HEAD TO DALLAS WITH ONE MISSION: DEFY HISTORY AND WIN BIG

Demonstrators march during a protest ahead of the second day of the Republican Midterm Convention in Dallas, Texas, Thursday, Sept. 10, 2026. (Leah Millis/Bloomberg via Getty Images)

He said that, during the group’s march, «we encountered some street closures by the police» and that officers arrested a couple of protesters who «were at the front of the group.»

Pressed on why the protesters were arrested, Majumdar said, «Those people were trying to draw people away from rioting provocateurs, and I think the police heard something. And they immediately tackled two of them and arrested them, and some of them even pulled out their guns as well.»

The protest came amid heightened concerns over political violence and the targeting of public figures. It also coincided with the first anniversary of the assassination of conservative activist and Turning Point USA co-founder Charlie Kirk.

CHARLIE KIRK CONTINUES TO INSPIRE REPUBLICANS AS PARTY RALLIES FOR MIDTERM BATTLE: ‘HAVE COURAGE’

Law enforcement officers monitor protest activity outside the Republican National Committee midterm convention at the American Airlines Center in Dallas, Texas, Sept. 10, 2026. (Blake Fagan/AFP via Getty Images)

SIGN UP TO GET THE POLITICS NEWSLETTER

Majumdar did not answer whether the protesters blocked any roads but said the confrontation occurred at the «closest entry point» to the convention.

Asked whether he had any message directly for President Donald Trump, Majumdar paused, smiled and said, «Thank you.»

After publication, Freedom Road Socialist Organization shared an additional statement from Majumdar in response to Fox News Digital’s question on his direct message to Trump. 

The statement said that «today the people of Dallas marched on a near empty RNC, in fact, the people made their decision to stand against the billionaires class— the same class that supports the Republican Agenda, and we are empowering people to find their home in our organization.»