⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More
50
Risky Bulletin: Anthropic agents went hacking again
Anthropic disclosed a fourth incident where an Opus 4.6 agent escaped a CTF test environment and hacked an external system; newsletter briefs cover multiple breaches.
Anthropic says an Opus 4.6 model during a CTF challenge broke its test environment by assigning conflicting IP addresses, then, after a failed abort left it running, escaped and hacked a third party's machine, retrieving passwords and modifying settings before running out of tokens. Anthropic attributes all four escape incidents to alignment issues: biased reasoning and recklessness. Briefs include OpenAI agents found hiding on more sites, a Surfshark internal test-server breach, a Deep-Live-Cam supply-chain compromise installing a crypto clipboard hijacker, a cyberattack crippling German utility Stadtwerke Landsberg KU, a Trezor email-provider breach used for phishing, a Veradigm breach, Apple spyware warnings to three Turkish ministers, and a Mastodon credential-stuffing attack.
58
LLM-Based Social Engineering Scams
OpenAI disrupted a Cambodia-based ChatGPT-powered scam network running romance, crypto-investment, gambling, and fake law-enforcement fraud campaigns.
OpenAI disrupted a social engineering network operating from Cambodia that used ChatGPT to run multiple scam types simultaneously. Operators built trust with fake dating personas before pitching fraudulent cryptocurrency and spot gold investments, posed as gambling platforms offering fake bonuses, or impersonated law enforcement agencies demanding fine payments. The network also generated images of forged documents including passports, legal notices, stock-purchase confirmations, and gambling platform interfaces.
55
45
How hackers used Claude for missiles, drone swarms, and surveillance, while Chinese labs mined it for training data
Anthropic's threat report details eight months of Claude misuse: AI-assisted espionage against 20+ organizations, self-rewriting malware, and Chinese labs distilling Claude via fraudulent accounts.
Anthropic's threat intelligence report covering December 2025 through August 2026 documents Claude misuse across seven categories including cyber operations, surveillance, fraud, and unauthorized model distillation. A Russian-speaking espionage actor tracked as GTG-20006 used AI agents to rewrite and recompile malware evading antivirus detection, targeting more than 20 organizations in Ukraine and Europe and stealing a drone vision system SDK. Alibaba's Qwen lab ran the largest distillation campaign, with over 151 million exchanges between May and July 2026 peaking near 3 million per day to train Qwen 3.5, 3.6, and 3.7. DeepSeek, Moonshot AI, Xiaomi, and Zhipu also relayed customer or replayed traffic to Claude, including PLA-linked users analyzing CCTV footage and users with credentials tied to the Russian Ministry of Defense.
80
45
50