Claude Code - Tool

Related Threat Clusters

• Chinese Hackers Weaponize AI Tools in Cyber Espionage Campaign

  Chinese-linked threat actors have integrated Anthropic's Claude Code and DeepSeek-v4-pro into a cyber espionage campaign targeting government entities and financial organizations in Taiwan. The operation utilizes…

  4 articles · Updated July 15, 2026
• Anthropic Accuses Alibaba of Largest AI Distillation Attack to Date

  Anthropic has accused Alibaba of conducting the largest known distillation attack on its Claude AI model. In a letter to US Senators, Anthropic detailed that operators linked to Alibaba executed nearly 29 million…

  16 articles · Updated June 25, 2026
• Critical Zoom Vulnerability Allows Unauthenticated Account Takeover

  Zoom has patched a critical vulnerability (CVE-2026-53412) in its Windows desktop client and VDI software that could allow unauthenticated attackers to take over user accounts via network access. The flaw, rated 9.8 out…

  22 articles · Updated July 16, 2026
• Vibe Coding Tools Found to Generate Critical Security Flaws

  A study by security startup Tenzai revealed that popular vibe coding platforms produce insecure code, including critical vulnerabilities, when responding to common programming prompts. The assessment, conducted in…

  3 articles · Updated January 14, 2026
• Critical Vulnerability in Claude Code GitHub Actions Exposes Repositories to Attacks

  A critical supply chain vulnerability in Claude Code’s GitHub Actions, identified by security researcher Ryota K from GMO Flat Security, allows attackers to compromise any repository using Anthropic’s CI/CD workflow.…

  18 articles · Updated June 2, 2026
• GitHub Patches Critical RCE Vulnerability CVE-2026-3854

  A critical remote code execution vulnerability, tracked as CVE-2026-3854, was discovered in GitHub's internal git infrastructure, allowing authenticated users to execute arbitrary commands via a crafted git push…

  49 articles · Updated April 28, 2026
• Anthropic's Claude Code Faces Backlash Over Covert User Tracking of Chinese Users

  Anthropic's AI tool, Claude Code, was found to contain hidden tracking mechanisms targeting Chinese users, raising significant privacy concerns. The covert detection logic, embedded since April 2, 2026, identified users…

  41 articles · Updated July 3, 2026
• Critical Sandbox Bypass in Claude Code Exposes User Data

  Anthropic's Claude Code AI platform has been found to have a critical network sandbox bypass vulnerability, allowing attackers to exfiltrate sensitive data, including user credentials and source code. Discovered by…

  7 articles · Updated May 20, 2026
• Microsoft and Salesforce Address AI Agent Data Exfiltration Vulnerabilities

  Microsoft and Salesforce have patched serious prompt injection vulnerabilities in their AI platforms, Copilot Studio and Agentforce, respectively. Capsule Security identified these flaws, allowing attackers to…

  6 articles · Updated April 15, 2026
• AI-Driven Discovery of RCE Vulnerabilities in Vim and GNU Emacs

  Researcher Hung Nguyen from Calif used Anthropic’s Claude Code AI to identify zero-day remote code execution (RCE) vulnerabilities in Vim and GNU Emacs. The vulnerabilities allow arbitrary command execution simply by…

  4 articles · Updated March 31, 2026

Recent Intelligence Reports

• Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug — Securityaffairs · July 16, 2026
• Chinese Hackers Embed Claude Code and DeepSeek in AI — Cybersecuritynews · July 15, 2026
• China — Gbhackers · July 15, 2026
• Spoofed Git Identity Ai Code Reviewer — www.manifold.security · July 12, 2026
• Vulnerability in coding agents: access to arbitrary files via symlinks — Heise.De · July 9, 2026
• GitLost: a public GitHub issue can steer an org's Agentic Workflow into leaking private repo contents, and a one-word prefix ("Additionally") bypassed the threat — Reddit · July 7, 2026
• Alberta uses Claude to scan 466 million lines of code for security vulnerabilities — Feeds.4Sysops · July 6, 2026
• Government of Alberta uses Claude to find and fix cybersecurity vulnerabilities — Anthropic · July 6, 2026

Related Entities