Anthropic publishes a threat intelligence report on how it disrupted efforts to misuse Claude for cyberattacks, influence operations, surveillance, and more

Cyber operations Surveillance operations Influence operations Conventional weapons Biological misuse Scams and fraud Illicit distillation

Anthropic 2026-09-11

Context & Ripple Effects

Anthropic had already described Claude’s use in sophisticated cybercrime in its August 2025 threat report, while its internal Clio threat-detection system was presented in 2024 as a way to identify and disrupt coordinated abuse. The new disclosure places cybercrime within a broader set of misuse cases, including surveillance, influence activity, biological research, fraud and model distillation.

The report also includes Anthropic’s claimed disruption of a Yemen-based weapons-engineering operation, making enforcement of model access—not only pre-release safeguards—a central part of its safety posture. Public reaction focused both on the seriousness of the cases and on Anthropic’s choice to publish them.

First-order effects

Anthropic must translate the reported cases into ongoing detection, account enforcement and incident-response work across Claude’s user base; the actors it identified lose access to the service for the disrupted activity.
Claude’s risk profile is framed less as a single cyber-security issue than as a multi-domain abuse surface spanning digital operations, surveillance, weapons-related work and fraud.

Second-order effects

Anthropic’s earlier disclosure of Claude-linked cybercrime and this broader report raise the bar for the company to substantiate disruption claims with repeatable threat-intelligence and enforcement processes.
ENISA’s newly granted testing access to Anthropic’s Mythos 5 model creates an external channel for evaluating model-risk controls, even as access to Mythos 5.1 remains unavailable.

Third-order effects

If frontier-model providers keep publishing and acting on abuse investigations, trust and safety functions will increasingly resemble standing threat-intelligence operations rather than moderation teams focused only on user policy violations.
The pattern shifts competition toward control over model access, monitoring and response capacity, because capability gains also widen the range of high-consequence misuse providers must contain.

The trend: Frontier AI providers are becoming security enforcement intermediaries, combining model access controls with threat intelligence to manage increasingly varied dual-use risks.

Discussion

@clairlemon Claire Lehmann on x
Why are they making this public when they can just inform the relevant US authorities? What public relations game is being played here? https://x.com/...
@pradeepxkapoor Pradeep Kapoor on x
Anthropic's new threat report is absolutely insane. They claim: -Alibaba extracted 151M+ Claude exchanges to help train Qwen -Kimi secretly routed some users to Claude without them knowing -DeepSeek apparently did the same -A weapons group used multiple Claude instances as an eng…
@davidagranovich David Agranovich on x
Breaking my X hiatus because this is fascinating. I ran threat disruption at Meta for 8 years, where we routinely released reports like the Anthropic report out today. It's noteworthy that Anthropic is being this transparent, and they deserve credit if we want this level of visib…
@anthropicai @anthropicai on x
We're publishing our most detailed threat intelligence report to date. It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them. We disrupted every operation in the report, an…
@noahpinion Noah Smith on x
Bioweapons are the vector by which AI can kill humanity.
@kunchenguid Kun Chen on x
omfg Qwen, GLM, Kimi, DeepSeek looks like they are all just claude
@alexplitsas Alex Plitsas on x
This is just what they found. It's a glimpse into just a small piece of what our enemies and adversaries are up to on a daily basis.
@zhodonx @zhodonx on x
I just went through Anthropic's threat report & woah! This is genuinely the craziest article I've read all month. They documented hackers, governments, scammers and Chinese AI labs all using Claude in completely different ways. & some of the cases are insane. Here's a TLDR; ⟣ A s…
@natolambert Nathan Lambert on x
Big W for people saying that distillation was mostly an SFT artifact, and how its unclear how it would become increasingly influential in an era defined by RL.
@paularambles @paularambles on x
imagine working on trust & safety at anthropic and coming across this operation on a random tuesday
@attrc Andrew Case on x
The cybersecurity section of this report is wild. APT operators used Claude for nearly everything: coding tools, testing against security products, building capture platforms, and processing victim data. Its like Anthropic was looking over their shoulder!
@suchenzang Susan Zhang on x
oh no chynaaa oh no biorisk oh no cybercrime oh no oh no oh nooo, please nationalize us! or buy our IPO! please take these dangers seriously!
@charliermarsh Charlie Marsh on x
Fascinating stuff from Anthropic's threat intelligence report
@rsanti97 Santi Ruiz on x
I *believe* this is the most comprehensive, transparent report a frontier lab has published on misuse of their models. It covers the full range of misuse, from dating app scams all the way to China-based undersea warfare operations.
@suchenzang Susan Zhang on x
anthropic: paying customers are stealing from us! meta ai/TBD/MSL: tyvm zhipu & moonshot! how much for your claude traces? mad respect for the hustle, all!
@quinnypig Corey Quinn on x
That's nothing, this one time I tried to misuse Claude to fix a security bug in my code.
@arpitrage Arpit Gupta on x
Adopting KYC/AMM style regs on frontier models addresses these alignment problems while preserving commercial use cases
@comfortablysmug @comfortablysmug on x
Holy shit. Anthropic caught Iran using Claude to target Navy bases, automate dossiers on Americans, and run influence campaigns on US social media. Details are insane. The morons uploaded everything including the organization plans of the Ayatollah's funderal lmao
@logangraham Logan Graham on x
We've reached the moment in time where (unsafeguarded, unmonitored) AI actually does just pose a national security risk. The biological misuse we caught is the most concerning to me. We work hard to stop this. But in a world of proliferation, we need to rapidly build defenses …
@chadwahl Chad Wahlquist on x
For people so smart, they seem to have no common sense. If you claim AGI but can't put the systems in place to secure it, then do you really have AGI? The things we have learned over the last 20 years is the value is in the system to secure, manage and control powerful technology…
@kimmonismus @kimmonismus on x
That's why everyone at Frontier Labs is so worried about the near future. …
@afinetheorem Kevin A. Bryan on x
Fascinating. Remember, for now, AI + bad human actor is biggest threat. Anthropic documents a *ton* of attempted bad behavior they stopped, but notes that open models + public scaffolds could do the attacks also with no way to stop them at source.
@kotekjedi_ml Alexander Panfilov on x
Aww :3 We finally got confirmation from Anthropic that their models were indeed distilled in the way we describe at https://stolen-thoughts.com/
@austen Austen Allred on x
Yo next time this happens just shut up about it and keep slipping data to US intelligence
@mobbs_mentality Meaghan Mobbs on x
This report should be required reading for every American 16 and up. Very simply - China is using AI to build national power because they want to surpass us. Iran is using AI to propagandize and repress because they want to undermine us. Russia is using AI to manipulate the infor…
Ryan Victory Ryan Victory on linkedin
I'm excited to share a new threat report (with IOCs!) we published today: https://lnkd.in/... The report covers a range of harm areas: Cyber …
Dave Orr Dave Orr on linkedin
Today we published our latest threat intelligence report. It covers some of the most sophisticated attempts to misuse Claude we've found so far …
Riggs Goodman III Riggs Goodman III on linkedin
Anthropic published its September 2026 threat intelligence report today. It covers misuse of Claude that our Threat Intelligence team detected and disrupted between December 2025 and August 2026. …
Nathan Frey Nathan Frey on linkedin
Today we're sharing some of the most notable attempts of threat actors attempting to use Claude for malicious activity, including developing biological weapons. …
Matthew Moe Matthew Moe on linkedin
Our next threat intelligence report came out today, including a biology section for the first time. We're showing evidence of people using …
@timkellogg.me Mr. Tim on bluesky
Anthropic report on misuse among users — cyberattacks, influence operations, surveillance, bio weapons — www.anthropic.com/threat-intel...
NewsMax.com Sandy Fitzgerald on x
Anthropic Disrupts Potential Biological Weapons Research
@amy_siskind Amy Siskind on x
Well this comforting...NOT! “Anthropic said it had disrupted several potential plots this year by scientists who used its leading artificial intelligence models to conduct research that could have helped develop biological weapons.” https://www.nytimes.com/...
@rmac18 Ryan Mac on x
might be cool if we could go back to the days when everyone was like “lol we wanted flying cars, instead we got 140 characters hahaha :)” https://www.nytimes.com/...
@tim_hua_ Tim Hua on x
I continue to not believe in biorisk from individual/small scale bioterrorists. Reading through the “biological misuse” section has not changed my mind. Most of these look pretty dual use to me.
@billkristol Bill Kristol on x
“Anthropic said it had disrupted several potential plots this year by scientists who used its leading artificial intelligence models to conduct research that could have helped develop biological weapons.” AI. What could go wrong? https://www.nytimes.com/...
Vincent Joralemon Vincent Joralemon on linkedin
This is I think one of the biggest threats that AI poses (like civilization-ending), but some thoughts: …
@judah-grunstein Judah Grunstein on bluesky
“You are not seeing someone in a comic book kind of way say, ‘Hey, I want to build a biological weapon to kill everybody,’” Jacob Klein, the head of threat intelligence at Anthropic [a company building an AI model it thinks will kill everybody], said ... “It's an incredibly nuanc…
@balint.house.gov Representative Becca Balint on bluesky
Congress must urgently hold hearings on frontier research. The leaders of these massive AI companies owe us transparency about what they're doing. — We can't afford to continue the Trump strategy of letting billionaires play with the safety of humanity.
@martylederman Marty Lederman on bluesky
Better than the alternative, I suppose ... (now what are the odds that all of the companies, here and abroad, also realize 100% detection?) — www.nytimes.com/2026/09/10/u...
@dustinvolz Dustin Volz on bluesky
New: Anthropic said it had disrupted several potential plots this year by scientists who used its leading artificial intelligence models to conduct research that could have helped develop biological weapons. www.nytimes.com/2026/09/10/u...
@repcasar Congressman Greg Casar on bluesky
Right now, we're counting on AI corporations to voluntarily block weapons of mass destruction. — Voluntarily. — Congress must do the obvious thing: BAN catastrophic AI uses like creating biological or nuclear weapons.
@kimmasters Kim Masters on bluesky
What are we even doing here? And wouldn't it be a great relief to have competent leadership? — www.nytimes.com/2026/09/10/u...
@harrylitman Harry Litman on bluesky
this plus Hugging Face genuinely suggests the (sci-fi, possibly malevolent, 2001) future is here, or will be by next week. In a way, swamps everything else. — www.nytimes.com/2026/09/10/u...
@richardsever Richard Sever on bluesky
“chilling examples of state-sponsored biological weapons developers tapping into the rapidly advancing capabilities of leading AI models” www.nytimes.com/2026/09/10/u...
@robertscotthorton Scott Horton on bluesky
Previously AI-driven research on biological warfare was identified as one of five principal scenarios in which AI could lead to the extinction of the human species. “In a new report, the A.I. start-up added that it could not determine if the research was legitimate or nefarious,
r/technology r on reddit
Anthropic Says It Blocked Possible Efforts to Build Biological Weapons
r/ContagionCuriosity r on reddit
Anthropic Says It Blocked Possible Efforts to Build Biological Weapons
r/technology r on reddit
Anthropic details how criminals and scientists misuse its AI for cyberattacks and surveillance
r/worldnews r on reddit
Anthropic details bad actors' efforts to misuse its AI for bioweapons
r/USNEWS r on reddit
Anthropic Says It Blocked Possible Efforts to Build Biological Weapons
r/singularity r on reddit
NYT - Anthropic Says It Blocked Possible Efforts to Build Biological Weapons
@bakkermichiel Michiel Bakker on x
Looks like Moonshot (Kimi) indeed had access to raw CoTs from Claude for distillation like the paper from @kotekjedi_ml et al suggested. Absolutely insane! Wonder how much closing this loophole will impact the performance of Kimi 4, 5, 6, 7...
@niubi Bill Bishop on x
The MSS is going to love this one. USG probably did
@niubi Bill Bishop on x
this report documents clear violations of PRC law by PRC entities. Anthropic should offer to forward its detailed findings to the Ministry of Public Security through the FBI's channel, would be a good example of US-China law enforcement cooperation:
@niubi Bill Bishop on x
puts moonshot and its CEO whom media has been fawning over in a bit of a different light
@aliceisplaying Alice on x
“Moonshot serves Claude instead of Kimi and collects exchanges for model training” looooooooooooooooooool
@firstadopter Tae Kim on x
DeepSeek and Kimi are now clearly scummy deceptive cheaters. Companies should use more legitimate open source models like Nemotron.
r/singularity r on reddit
Chinese AI Giants Accused of Sending Millions of User Queries to U.S. Models- WSJ
r/China r on reddit
Chinese AI Giants Accused of Sending Millions of User Queries to U.S. Models- WSJ
@irgarner Dr. Ian Garner on bluesky
Criminals, state-sponsored groups, spyware vendors, scientists and propagandists have attempted to use Anthropic's AI to design missiles and bombs, create deadly pathogens and surveil dissidents. — We're so fucked, aren't we?
@kristiankiehling Kristian Kiehling on bluesky
“One of the operators is a Russian speaker[...]whose tradecraft and targeting are consistent with Russian state-nexus espionage. They ran operations attacking military intelligence targets in Ukrainian and European governments, as well as [US] diplomatic and defense organization…
@kaseygifford Kasey Gifford on bluesky
Extermination of the human race is a small price to pay for episodes of Fruit Love Island. — www.nytimes.com/2026/09/10/u...
@dearsarah Sarah Szalavitz on bluesky
Anthropic Says It Blocked Possible Efforts to Build Biological Weapons—but could not determine if the work was legitimate or nefarious. www.nytimes.com/2026/09/10/u... if Anthropic's customers are “building biological weapons,” isn't it prima facie nefarious—& aren't they liable?…
Utkarsh Tripathi Utkarsh Tripathi on linkedin
For all SOCs trying to figure out Claude weaponisation detection within their telemetry. — It's Anthropic's most detailed threat intelligence report to date. …
Jacob Klein Jacob Klein on linkedin
Today my team published our latest threat intelligence report of about 40 cases of real-world AI misuse we disrupted over the past eight months. …
Dlshad Othman Dlshad Othman on linkedin
We just dropped this report that covers our observation on threat actors abusing our models in different harm areas including cyber, IO, surveillance, fraud, weapons and more. …
@vortexegg.com @vortexegg.com on bluesky
I feel like most cyberpunk stories didn't have nearly enough fraud in them [embedded post]
Dr. Todd Boudreau Dr. Todd Boudreau on linkedin
One answer to the well worn question, “What can possibly go wrong?” — Bad actors in China and Russia are already weaponizing Anthropic's AI …
Pradeep Sanyal Pradeep Sanyal on linkedin
Anthropic published a threat intelligence report with a detail that deserves more attention than the usual “AI is helping hackers” headline. …
@amritwt Amrit on x
holy shit kimi was faking it's performance by serving you claude you have been using claude all along
Steven Santa Maria Steven Santa Maria on linkedin
Anthropic identifying and disrupting IRGC psychological operations that leveraged CLAUDE. IRGC PSYOP and malign CYBER actors are highly sophisticated …
Florian Roth Florian Roth on linkedin
A few things I'd like journalists to keep in mind before writing about Anthropic's latest reports. Some of the posts going around …
r/singularity r on reddit
Qwen, Kimi and DeepSeek ran industrial Claude distillation: Alibaba 151M exchanges, Moonshot 23M, DeepSeek 12M in 14 days. …
@whodat35 Lee West on bluesky
Anthropic's report details bad actors, including state-sponsored groups and scientists, attempting to misuse its AI for bioweapons development, missile design, and surveillance. The company banned these accounts and calls for industry-wide collaboration to address AI risks.

Chronicles