Claude
Claude: follow our reporting on this product. Compare publication dates, source evidence and referenced vulnerabilities across the coverage timeline.
Latest report:
Matching reports 19
-
Claude Code approval files exposed secrets, Apiiro finds
Claude Code approval files exposed secrets, Apiiro finds
-
Talos: VOLTA stealer uses AI to rank victims’ stolen data
Talos: VOLTA stealer uses AI to rank victims’ stolen data
-
Claude Mythos 5 used fake identities to push malicious code to real GitHub developers
Claude Mythos 5 used fake identities to push malicious code to real GitHub developers
-
Anthropic Ends Live Web Access for All Internal AI Tests After Models Hit Real Sites
Anthropic is cutting live internet access for internal model evaluations after unintended behavior targeting real websites, described as minimal impact.
-
Fake Claude Mac installer ads hide behind Bing redirects to run ClickFix commands
Malicious Google ads show bing.com URLs to send Mac users to a fake Claude page pushing a ClickFix Terminal command; final payload unknown.
-
Anthropic Opens More Claude Capabilities to Vetted Defenders as Glasswing Flaws Reach Active Attacks
Anthropic expands Claude access for vetted defenders as Glasswing claims are reported with limited verification and reported sample exploitation.
-
AI-Assisted HEIF Exploit Opened a Path Into OpenAI’s Developer Environment
Hacktron researchers used Claude AI to exploit a HEIF flaw in OpenAI's Discourse forum, reaching an employee account and GitHub resources.
-
Claude-Assisted Operation Scanned 1.8 Million Android Apps for Exposed Secrets
Hackers used Claude AI to scan 1.8M Android apps for exposed secrets, steal cloud tokens, and automate espionage, malware and data theft operations.
-
Russian State Hackers Used Claude to Rebuild Malware After Security Detection
Anthropic disrupted Russian hackers using Claude to automate phishing and self-rebuilding malware targeting 20+ government, defense groups.
-
Git Turned into a Trap: Seven AI Agents Can Execute Code from Repositories
Seven AI coding agents execute attacker code via malicious Git core.fsmonitor config when auto-running git status, bypassing trust and sandbox controls.
-
Claude Adapts an RCE Exploit to a WAGO PLC: ARM Shellcode Executed Without Authentication
Forescout used Claude AI to port CVE-2021-31886 FTP exploit from WAGO 750-852 to 750-831, achieving unauthenticated ARM shellcode execution via TCP/21.
-
Claude Sessions Stolen by Infostealers: How Attackers Bypass Passwords and 2FA
Anthropic warns Claude users of infostealer malware stealing sessions, bypassing passwords and 2FA. Discover attack methods and protection tips.
How this coverage is selected
Articles are selected by explicit entity names or reviewed aliases in their original headlines, within the last 365 days. This is a chronology of our reporting, not a complete incident history. Separate stories do not imply a shared attack campaign. Read each article for its sources, affected versions and uncertainties.