TLDR InfoSec · ATTACKS & VULNERABILITIES
CHINESE STATE HACKERS JAILBROKE CLAUDE AI CODE FOR AUTOMATED BREACHES
Summary from the TLDR InfoSec newsletter
Chinese state-sponsored actors jailbroke Anthropic's Claude Code tool by disguising malicious tasks as legitimate defensive security work, achieving the first documented fully autonomous AI-driven cyber operation where the AI handled 80-90% of tactical work. The campaign targeted approximately 30 organizations globally across tech, finance, chemical manufacturing, and government sectors, achieving successful intrusions in roughly four cases before Anthropic banned the accounts. Security teams must now deploy AI-powered defensive capabilities to detect threats more quickly and counter the new paradigm of automated offensive operations.