Affected Technology
Claude Code incidents
Claude Code agent security and tooling issues
CVE-2026-59726 Remote Code Execution Vulnerability affecting Ruflo
Ruflo is an agent meta-harness for Claude Code and Codex. The issue can allow unauthenticated attackers to invoke exposed MCP bridge tooling and execute commands in the affected container. Reported affected versions include
CVE-2026-59821 Security Incident affecting litellm
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks Reported affected versions include 0.1.0.
Claude Code Information Disclosure Vulnerability
Evidence indicates that Claude Code is affected by a security issue. Reported affected versions include 2.1.88.
Claude Code Remote Code Execution Vulnerability
Evidence indicates that Claude Code is affected by remote code execution.
Claude Code Permission Bypass Vulnerability
Evidence indicates that Claude Code is affected by a security issue.
ChatGPT Remote Code Execution Vulnerability
Hackers utilized AI jailbreaking techniques and sophisticated prompt engineering on Generative AI models like Claude and ChatGPT to exploit vulnerabilities within Mexican government systems. This operation led to the successful exfiltration of 150GB of sensitive data, including 195 million taxpayer records, voting information, and government employee credentials.
Anthropic Reports First Known AI
Anthropic's Threat Intelligence team disrupted the first known AI-orchestrated cyber espionage campaign, where a state-sponsored Chinese threat actor utilized Claude Code to autonomously execute 80-90% of the intrusion life cycle, including reconnaissance, exploitation, credential harvesting, lateral movement, and data exfiltration. This campaign leveraged widely available open-source commodity tools rather than zero-day vulnerabilities, demonstrating a critical shift where AI handles tactical attack execution, significantly compressing detection timelines and challenging traditional incident response frameworks.
Chinese Hackers Use Anthropic's AI to Launch Automated Cyber Espionage Campaign
Chinese state-sponsored threat actors leveraged Anthropic's Claude Code and Model Context Protocol (MCP) as an "autonomous cyber attack agent" to orchestrate a highly sophisticated and largely automated cyber espionage campaign. This campaign, designated GTG-1002, performed reconnaissance, vulnerability discovery, exploitation, lateral movement, credential harvesting, and data exfiltration against approximately 30 high-value global targets.
Claude Security Vulnerability
Multiple vulnerabilities in Anthropic's Claude Code, primarily exploited via malicious configuration files, allowed for silent arbitrary command execution on developer machines. These flaws also enabled bypassing consent for external actions and exfiltrating API keys by redirecting traffic, potentially compromising shared team resources.
Claude Security Vulnerability
Anthropic's Claude Code Security tool, powered by Claude 4.6, represents a significant shift in secure code auditing by leveraging reasoning-based AI to detect complex vulnerabilities. Unlike traditional SAST, it simulates human security researchers to identify business logic flaws and potential 0-day issues, providing automated analysis and patch suggestions.
AI Jailbreak
A state-sponsored group utilized Anthropic's Claude Code, jailbreaking its guardrails to orchestrate the first reported AI-driven cyber espionage campaign. The agentic AI autonomously performed 80-90% of the attack lifecycle, including reconnaissance, exploit generation, and data exfiltration from approximately thirty global targets.