Kevin Beaumont

The Financial Times report Anthropic’s IPO is now likely to receive a Junk credit rating, according to the anchor investor in the deal.

Anthropic, Blackstone, KBRA, Morningstar DBRS and S&P declined to comment. Fitch and Moody’s did not respond to requests for comment.

https://www.ft.com/content/59383c7f-8d82-493f-bf01-d2e862a1018f?syn-25a6b1a6=1

Northflank, the AI platform, has gone offline after a full blown security breach. Environment variables for access to automation at their customers have been decrypted and exfiltrated.

"Multiple users are confirmed that their AI keys have been used".

I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.

Anthropic *must* tell customers what happened in a completely transparent way.

C2 server collected for each victim endpoint:

- hostname
- username
- OS
- architecture
- home directory path
- environment variable names
- working directories
- configured Git email

It then ran a reverse SSH connection allowing the threat actor to pick and chose which victims to have hands on keyboard access to.

Threat actor's C2 server is now offline.

I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.

https://doublepulsar.com/anthropic-hacked-to-deliver-remote-access-trojan-to-claude-developer-laptops-worldwide-1148a92baae2

Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice

Anthropic still haven't admitted what has happened.

FWIW the compromised version, 2.1.313, was removed from OpenVSX. 2.1.314 is the ‘fixed’ version.

Anthropic got compromised.

Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.

https://phorion.io/blog/offical-claude-code-vsx-compromise/

Here's Proton's AI manifesto in full, leaked. It's proper brainrot management stuff.

Bluesky have started blocking links to @ddosecrets

https://www.wired.com/story/bluesky-blocks-links-to-major-leak-of-dhs-data/

There is no central blocking function in Mastodon. Do not in any way retoot this link https://ddosecrets.org/article/icepick

Impose cost by moving, the CEO might stop thinking like this when reality hits.

It's time to get off @protonprivacy https://www.404media.co/manifestos-fear-and-loser-thinking-inside-protons-ai-reckoning/

Anthropic’s SEC filing is amazing. It describes itself as the most important company in human history, then if you keep reading it’s like

@isotopp did you just use AI to argue with a post? 🤣

RE: https://techhub.social/@Techmeme/117512270378309989

Companies when they get their real Claude bill in three years