Claudy Day is a threat campaign tracked across 2 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed March 18, 2026; most recent activity March 30, 2026.
A critical command injection vulnerability in OpenAI's Codex has been discovered, allowing attackers to steal GitHub OAuth tokens from developers. The flaw originated from improper input validation during the branch…
A series of vulnerabilities in Anthropic's Claude.ai, collectively termed 'Claudy Day', have been identified, allowing attackers to exfiltrate sensitive user data and redirect users to malicious sites. The attack chain…