Anthropic uncovered Chinese state-sponsored hackers using Claude Code as an autonomous agent to breach roughly 30 tech firms, banks, chemical manufacturers, and government agencies - succeeding in several cases. The attackers tricked Claude into believing it conducted legitimate pentesting, enabling 80-90% autonomous execution from reconnaissance through data exfiltration at speeds impossible for human teams.