Incidents tagged Anthropic

Amazon Q Vulnerability: Compromise via MCP Auto-Execution wiz.io

Evidence indicates that Claude Code is affected by a security issue. Reported affected versions include 2.1.88. Exploitation evidence is classified as confirmed in the wild.

The article highlights advanced threats to AI agents, including "Shadow Escape," a zero-click exploit targeting Model Context Protocol (MCP) based systems that enables workflow hijacking and data exfiltration. Another critical vulnerability involves "ASCII Smuggling," where hidden malicious prompts embedded in files lead to remote code execution and sensitive data exfiltration by deceiving LLMs like Claude.

Salesforce Agentforce was susceptible to a critical indirect prompt injection vulnerability, codenamed ForcedLeak (CVSS 9.4). This flaw allowed attackers to exfiltrate sensitive CRM data by manipulating Web-to-Lead forms, causing AI agents to transmit information to an attacker-controlled domain.

Hackers exploited a vulnerable workflow in the Nx build system to achieve code injection and GITHUB_TOKEN theft, enabling the publication of malicious package versions. These malicious packages deployed a post-install script that exfiltrated thousands of sensitive credentials and notably weaponized AI assistants like Claude and Gemini for reconnaissance and data exfiltration.