Claude threat report

Anthropic disclosed GTG-1002, a PRC-linked campaign leveraging Claude Code as an operational platform for autonomous breach operations. Threat actors combined Claude Code with open-source penetration-testing tools via Model Context Protocol servers for reconnaissance, vulnerability assessment, credential harvesting, and lateral movement at machine speed without human-like operational constraints.