New records in the registry of AI hacking incidents.https://aihacklog.com/enhttps://aihacklog.com/incidents/gtg-1002-claude-code-espionage/https://aihacklog.com/incidents/gtg-1002-claude-code-espionage/A group Anthropic assesses as Chinese state-sponsored used Claude Code, connected to hacking tools through MCP, to attack about 30 organisations in September 2025. According to Anthropic, AI did 80-90% of the work and a small number of intrusions succeeded.Sun, 15 Nov 2026 00:00:00 GMTIncidentAI-orchestrated intrusionhttps://aihacklog.com/incidents/s1ngularity-nx-ai-cli-malware/https://aihacklog.com/incidents/s1ngularity-nx-ai-cli-malware/Attackers stole the Nx project's npm token and published malicious versions of the Nx build system on 26 August 2025. The malware ran the AI command-line tools on developers' machines to search for secrets, then posted stolen credentials to public GitHub repositories.Sun, 15 Nov 2026 00:00:00 GMTIncidentAI malwarehttps://aihacklog.com/incidents/gtg-2002-claude-code-data-extortion/https://aihacklog.com/incidents/gtg-2002-claude-code-data-extortion/A cybercriminal Anthropic tracks as GTG-2002 used Claude Code to break into networks, steal data and write ransom demands, potentially affecting at least 17 organisations in government, healthcare and emergency services. Anthropic disclosed it on 27 August 2025.Sun, 15 Nov 2026 00:00:00 GMTIncidentAI-orchestrated intrusionAI ransomware