negativeSYS.SOURCE: TechCrunch• 2026-09-08T21:10:27Z

Unauthorized Access Exploits Claude Tokens, Leading to Subscriber Account Compromises

#ai #malware #security #tokens #vulnerability

Hackers are exploiting stolen Claude session keys to unauthorizedly consume AI tokens, leading to account compromises and financial losses for subscribers. Anthropic identified the breach via suspicious activity but lacks transparency in tracking itemized usage, complicating user detection and resolution.

Last month, a Claude user noticed his account was consuming tokens even though he wasn't working. Anthropic has since warned users about hackers.

Read original article

*** END OF TRANSMISSION ***

> GOOGLE CHROME V8 ZERO-DAY EXPLOITED IN THE WILD FOR SANDBOX CODE EXECUTION > AI RESEARCHER JACOB COXON RESIGNS FROM ANTHROPIC, WARNS OF EXISTENTIAL RISKS > CRITICAL CPANEL VULNERABILITY ALLOWS PRIVILEGE ESCALATION VIA EMAILTRACK MODULE > F5 BIG-IP APM MALWARE EVADES DISK SCANS BY INJECTING PHP WEB SHELL INTO MEMORY > GPT-5.6 SOL'S APPLICATION IN QUANTUM COMPUTING EXPERIMENTS > THE PSYCHOLOGY OF MOTIVATION AND SCIENTIFIC PROGRESS > RESEARCHER DEMONSTRATES BYPASS OF MICROSOFT DEFENDER'S SHIELDBREAK PATCH VIA SHIELDCRASH VULNERABILITY > COPYRIGHT ABOLITION CLAIM AND MASTODON WEB APPLICATION TECHNICAL REQUIREMENTS > SAP ADDRESSES CRITICAL CVSS 10.0 VULNERABILITY IN KERNEL ALLOWING UNAUTHENTICATED RCE > TRADEMARK STATUS OF 'TWEET' AND BIRD LOGO IN X V. PROJECT BLUEBIRD CASE> GOOGLE CHROME V8 ZERO-DAY EXPLOITED IN THE WILD FOR SANDBOX CODE EXECUTION > AI RESEARCHER JACOB COXON RESIGNS FROM ANTHROPIC, WARNS OF EXISTENTIAL RISKS > CRITICAL CPANEL VULNERABILITY ALLOWS PRIVILEGE ESCALATION VIA EMAILTRACK MODULE > F5 BIG-IP APM MALWARE EVADES DISK SCANS BY INJECTING PHP WEB SHELL INTO MEMORY > GPT-5.6 SOL'S APPLICATION IN QUANTUM COMPUTING EXPERIMENTS > THE PSYCHOLOGY OF MOTIVATION AND SCIENTIFIC PROGRESS > RESEARCHER DEMONSTRATES BYPASS OF MICROSOFT DEFENDER'S SHIELDBREAK PATCH VIA SHIELDCRASH VULNERABILITY > COPYRIGHT ABOLITION CLAIM AND MASTODON WEB APPLICATION TECHNICAL REQUIREMENTS > SAP ADDRESSES CRITICAL CVSS 10.0 VULNERABILITY IN KERNEL ALLOWING UNAUTHENTICATED RCE > TRADEMARK STATUS OF 'TWEET' AND BIRD LOGO IN X V. PROJECT BLUEBIRD CASE