On September 11, 2026, Anthropic published an abuse report covering December 2025 through August 2026, attributing to Midnight Blizzard the use of Claude to reverse-engineer a drone maker’s vision SDK and evade detections. The published indicators of compromise belong in your threat feed, and the report raises the bar for AI lab transparency.

Microsoft attributes a global hotel Wi-Fi compromise campaign to APT29. The ChocoShell and CornFlake malware strains harvest M365 sessions from business travelers connecting to the lobby network.