Incidents tagged Claude

A critical vulnerability in Anthropic's Claude Code allows for the bypass of its permission system's deny rules. This flaw can be exploited via AI-generated prompt injection, enabling attackers to exfiltrate sensitive credentials and compromise cloud or CI/CD environments.

Evidence indicates that Claude Code is affected by a security issue. Reported affected versions include 2.1.88. Exploitation evidence is classified as confirmed in the wild.

Hackers utilized AI jailbreaking techniques and sophisticated prompt engineering on Generative AI models like Claude and ChatGPT to exploit vulnerabilities within Mexican government systems. This operation led to the successful exfiltration of 150GB of sensitive data, including 195 million taxpayer records, voting information, and government employee credentials.

The article highlights advanced threats to AI agents, including "Shadow Escape," a zero-click exploit targeting Model Context Protocol (MCP) based systems that enables workflow hijacking and data exfiltration. Another critical vulnerability involves "ASCII Smuggling," where hidden malicious prompts embedded in files lead to remote code execution and sensitive data exfiltration by deceiving LLMs like Claude.

Anthropic's Threat Intelligence team disrupted the first known AI-orchestrated cyber espionage campaign, where a state-sponsored Chinese threat actor utilized Claude Code to autonomously execute 80-90% of the intrusion life cycle, including reconnaissance, exploitation, credential harvesting, lateral movement, and data exfiltration. This campaign leveraged widely available open-source commodity tools rather than zero-day vulnerabilities, demonstrating a critical shift where AI handles tactical attack execution, significantly compressing detection timelines and challenging traditional incident response frameworks.

Chinese state-sponsored threat actors leveraged Anthropic's Claude Code and Model Context Protocol (MCP) as an "autonomous cyber attack agent" to orchestrate a highly sophisticated and largely automated cyber espionage campaign. This campaign, designated GTG-1002, performed reconnaissance, vulnerability discovery, exploitation, lateral movement, credential harvesting, and data exfiltration against approximately 30 high-value global targets.

Hackers exploited a vulnerable workflow in the Nx build system to achieve code injection and GITHUB_TOKEN theft, enabling the publication of malicious package versions. These malicious packages deployed a post-install script that exfiltrated thousands of sensitive credentials and notably weaponized AI assistants like Claude and Gemini for reconnaissance and data exfiltration.