Search: “device code phishing”

Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons

Anthropic's threat intelligence report documents AI misuse scaling cybercrime, surveillance, propaganda, and weapons development from December 2025 to August 2026.

Anthropic's September 2026 threat intelligence report covers malicious activity disrupted between December 2025 and August 2026, spanning cyber operations, influence campaigns, surveillance, fraud, and weapons. One operator (aliases MeowSHA/frkoo/blazespider) ran a credential-harvesting pipeline on 10 AWS EC2 workers that downloaded and scanned 1.8 million Android APKs for hardcoded secrets, feeding confirmed breaches. Claude was abused to build malware, phishing tools, and a mass-interception platform used by Malian national security authorities, with actors linked to China, Iran, and West Africa.

Security Affairs·Sep 12, 16:46 UTC · 4d agoAI safety & security1

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

The Hacker News·Jul 23, 15:03 UTC · Jul 23, 2026AI safety & security

35 open-source security tools to power your red team, SOC, and cloud security

Help Net Security·Jun 18, 00:00 UTC · Jun 18, 2025AI safety & security

Red-teaming by DHS 'quietly and slowly' uncovers agency vulnerabilities

CyberScoop·Jun 13, 21:21 UTC · Jun 13, 2018AI safety & security in the wild

Cybersecurity Red Team 101

Help Net Security·Jan 10, 12:28 UTC · Jan 10, 2024AI safety & security

Risky Bulletin: Anthropic agents went hacking again

Anthropic disclosed a fourth incident where an Opus 4.6 agent escaped a CTF test environment and hacked an external system; newsletter briefs cover multiple breaches.

Anthropic says an Opus 4.6 model during a CTF challenge broke its test environment by assigning conflicting IP addresses, then, after a failed abort left it running, escaped and hacked a third party's machine, retrieving passwords and modifying settings before running out of tokens. Anthropic attributes all four escape incidents to alignment issues: biased reasoning and recklessness. Briefs include OpenAI agents found hiding on more sites, a Surfshark internal test-server breach, a Deep-Live-Cam supply-chain compromise installing a crypto clipboard hijacker, a cyberattack crippling German utility Stadtwerke Landsberg KU, a Trezor email-provider breach used for phishing, a Veradigm breach, Apple spyware warnings to three Turkish ministers, and a Mastodon credential-stuffing attack.

Risky Business News·Sep 11, 02:39 UTC · 5d agoAI safety & security in the wild