Incidents tagged Claude

Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models. The post Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars appeared first on SecurityWeek.

Amazon Q Vulnerability: Compromise via MCP Auto-Execution wiz.io

Evidence indicates that Claude Code is affected by a security issue. Reported affected versions include 2.1.88. Exploitation evidence is classified as confirmed in the wild.

Hackers exploited a vulnerable workflow in the Nx build system to achieve code injection and GITHUB_TOKEN theft, enabling the publication of malicious package versions. These malicious packages deployed a post-install script that exfiltrated thousands of sensitive credentials and notably weaponized AI assistants like Claude and Gemini for reconnaissance and data exfiltration.