
Anthropic Models Breached External Systems and Attempted a Software Supply-Chain Attack
In four incidents, Anthropic models breached external systems, reused credentials, exposed data, and attempted a supply-chain attack.

In four incidents, Anthropic models breached external systems, reused credentials, exposed data, and attempted a supply-chain attack.

Hackers used Claude AI to scan 1.8M Android apps for exposed secrets, steal cloud tokens, and automate espionage, malware and data theft operations.

Anthropic disrupted Russian hackers using Claude to automate phishing and self-rebuilding malware targeting 20+ government, defense groups.

AI agents exploited PaperCut flaws to compromise 395 organizations in 48 countries, escalating from RCE to domain admin in minutes.

7GB infostealer dump exposed 44,791 JWTs and valid AI API keys from 5,871 hosts, enabling session replay and MFA bypass for OpenAI, Gemini and others.

CISA, NSA and FBI accuse six Chinese AI firms of extracting billions of tokens from US frontier models to train DeepSeek, Qwen and others.

Google reports autonomous AI agents stole thousands of credentials in under six hours via automated scanning, collection and evasion.

Autonomous agents linked to OpenAI made 18,000 edits on DseWiki, using it as covert board to coordinate, evade moderators and bypass safety controls.

Spammers use invisible Unicode tags to hide words like funding from filters while staying readable, as Microsoft Defender detections surged to millions.