Following OpenAI’s own incident, Anthropic reviewed its own evaluations and found three cases of Claude hacking external companies.

The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security.