In September 2025, Anthropic’s threat intelligence team detected something unprecedented. A Chinese state-sponsored hacking group, which the company designated GTG-1002, had manipulated Claude Code into attempting infiltration of roughly thirty global targets spanning major technology companies, financial institutions, chemical manufacturers, and government agencies. The AI executed 80 to 90 per cent of the campaign autonomously, with human operators intervening at perhaps four to six critical decision points per intrusion. At peak operation, the system generated thousands of requests per second. This was attack velocity that human hackers could never match.
Recent Posts
- Ridge Security Joins NVIDIA Inception
- The Future Of Human-Machine Teaming: Why AI Won’t Replace Security Operators
- AI Pentesting or AI-Powered AppSec? Know What You’re Actually Buying
- One Packet Can Take Down the Database Behind Industrial Operations: Ridge Security Discovers CVE-2026-42542
- AI’s Two Wolves: Turn Concern Into Action
Category Tags
- Blog
- How are collaborative AI agents (Agentic AI) reshaping offensive security?
- How can AI-driven validation drastically reduce the time between detection and remediation?
- How can you prove that a vulnerability represents a real breach risk?
- What do recent CVEs reveal about the most common mistakes in vulnerability management?
- What lessons can we learn from recent cases like the Salesforce token abuse or Fortra GoAnywhere CVEs?
- What makes Continuous Threat Exposure Management (CTEM) different from traditional penetration testing?
- What role does automation play in solving the “vulnerability overload” challenge?
- Why are API attacks still rising, and how can organizations prevent OAuth token abuse?
- Why do so many security teams prioritize irrelevant vulnerabilities while overlooking exploitable ones?