Executive Summary
Anthropic reported that criminal and state-backed groups used Claude between December 2025 and August 2026 for cyberattacks, propaganda and surveillance, including automating exploitation and data theft.
What Happened
Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The threat actors, which the artificial intelligence (AI) company has branded Generative Threat Groups (GTGs), span state-sponsored groups, financially motivated criminals, commercial
Affected Products
- Anthropic Claude
Vulnerability / Attack Technique
AI-automated intrusion and data theft
Technical Mechanism
As reported, models automated parts of attack operations.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
AI misuse spans state and criminal actors. RealGround analysis: expect faster, more automated intrusions.
Recommended Controls
- Shorten detection and response times
Related RealGround Service
AI Red Teaming · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/09/claude-used-to-automate-exploitation.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.