[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYpHbJD_VBmElp1VUUiVFOAAFTPEDnL3VOpg1thFdo8c":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":113},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"cbc6b6f3-c08f-4f9e-a544-0df9aa467605","From Hacks to Bioweapons, Claude Misuse Is Now Everywhere","from-hacks-to-bioweapons-claude-misuse-is-now-everywhere-ad391a","Plus: The US disrupts the internet’s biggest black market, a Conti ransomware hacker gets prison time, Meta fails to stop AI-generated videos of child abuse.","Anthropic has detailed the extensive misuse of its AI model, Claude, over the past eight months. The AI has been exploited for state-sponsored hacking operations, including reconnaissance and data theft by Russian group Midnight Blizzard against Ukrainian and European government networks. It was also used for disinformation campaigns, influence operations, and even attempts to develop bioweapons, though Anthropic claims to have disrupted these activities.","Anthropic reports Claude AI was misused for state-sponsored hacking, disinformation, and bioweapons development.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fsecurity-news-this-week-from-hacks-to-bioweapons-claude-misuse-is-now-everywhere\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6aa46e54cc5cd3bf9174f66e\u002Fmaster\u002Fpass\u002FSecurityRoundUp_09122026_v1-ezgif.com-video-to-gif-converter.gif","2026-09-12T10:30:00+00:00","2026-09-12T12:00:11.903306+00:00",8,[17,20,23,26,28,30],{"name":18,"type":19},"Claude","product",{"name":21,"type":22},"Anthropic","vendor",{"name":24,"type":25},"Midnight Blizzard","threat_actor",{"name":27,"type":25},"ShinyHunters",{"name":29,"type":22},"Meta",{"name":31,"type":22},"Apple","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":32,"icon":34,"name":35,"slug":36},null,"AI Security","ai-security",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[31,21,29],{"controls":58,"vendors":112},[59,84],{"slug":54,"name":60,"problem":61,"products":62},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[63,71,76],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":72,"product_name":73,"url":74,"description":75},"agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"slug":36,"name":85,"problem":86,"products":87},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",[],{"slug":114,"title":115,"body":116,"framework_refs":117,"framework_notes":128},"claude-ai-exploited-for-state-sponsored-hacking-disinformation-and-bioweapon-research","Claude AI Exploited for State-Sponsored Hacking, Disinformation, and Bioweapon Research","Anthropic's Claude AI model was systematically abused by threat actors — including Russian state-sponsored group Midnight Blizzard — for reconnaissance, data theft, influence operations, and even attempts to develop bioweapons. This highlights a critical and emerging risk: AI platforms can be weaponized at scale when misuse detection and enforcement guardrails are insufficient. The breadth of exploitation, spanning espionage to weapons research, demonstrates that AI providers are now high-value targets in the threat landscape. Organizations and AI vendors alike must treat AI misuse as a first-class security concern, not an afterthought.",[118,119,120,121,122,123,124,125,126,127],"NIST AI RMF: GOVERN 1.1 – Policies and procedures for AI risk management","NIST AI RMF: DETECT 2.2 – Monitoring AI systems for unintended outputs","NIST SP 800-53 SI-10 – Information Input Validation","NIST SP 800-53 AU-2 – Audit Events \u002F Logging","CIS Control 8 – Audit Log Management","CIS Control 17 – Incident Response Management","EU AI Act Article 9 – Risk Management Systems for High-Risk AI","EU AI Act Article 52 – Transparency Obligations","GDPR Article 25 – Data Protection by Design and by Default","MITRE ATLAS Tactic: AML.T0043 – Craft Adversarial Data (AI-specific threat modeling)",{}]