Abhijit Bagri

It took 3 hours and one token to fully compromise an enterprise cloud environment. Anthropic's report from today yet another wake-up call. AI-powered attacks are already here, you just haven't heard about them yet.

Last week an OpenAI model escaped its sandbox and hacked Hugging Face. Today Anthropic just disclosed three incidents where Claude models reached the open internet and hacked into three real companies. This shouldn't shock anyone who has vibe-coded. You've watched an AI confidently delete the wrong file/database. AI makes mistakes. Give that same intelligence superhuman persistence, machine speed, and a pathway to production systems, and its no longer a tiny coding bug, it starts causing real damage in the world. One example from the disclosure: believing it was still in a simulation, Claude attacked its target by publishing a malware into a real public code registry. That required an account. The account required an email. The email required a phone number. It tried to find money to buy one, failed, backtracked to a free email provider, registered, and uploaded the malware. None of the victims noticed. Presumably they learned of the breaches when Anthropic called them, in some cases months later. Obviously: credit to Anthropic and OpenAI for auditing themselves and publishing the details so we can learn as a global cyber community. Unfortunately, what just happened is the best case: an aligned model with safety training, pursuing a harmless test goal, no criminal involved. What happens when criminals start steering frontier models on purpose? Or we have purpose-built malicious models with no safeguards? Every one of these attacks WAS detectable, though. BUT it took some someone noticing something that was weird, strange or Abnormal: Hugging Face noticed anomalous activity. OpenAI's monitoring flagged unusual behavior. Anthropic found its incidents by reviewing transcripts for unexpected actions. None came from recognizing a known attack or something that has been seen before. All came from noticing behavior that wasn't normal. Attackers, human or AI, have one unavoidable weakness: they have to look normal every time. They can't. But no human reviews logs at machine speed (or machine efficiency). Exploiting that weakness requires AI-native defense: baseline normal behavior, detect anomalies, respond autonomously in real time. We built @Abnormal Behavioral AI to detect these type of cyber attacks and response at machine speed. Now the attacks are arriving faster than we can track, and certainly faster than any security roadmap assumed. Now is the time to rally across the cyber community to ensure that we're using good AI to stop the bad AI before it gets totally out of control.

.@AnthropicAI has filed a lawsuit against @Abnormal claiming we copied their brand to mislead security customers, and they are asking for “all revenues, earnings and profits” This is obviously not true. They don’t own every A/slash design in AI cybersecurity, and they don’t get to turn a logo dispute into a claim on Abnormal’s entire business. It would be easier to concede quietly. But Abnormal was built on trust, innovation, and intellectual honesty. Values are what you do when tested (especially when inconvenient) Our behavioral security platform and our AI models are ours. Everything meaningful about Abnormal was built the hard way: the technology, the customer relationships, and the trust. We earned that trust by protecting customers, and we will defend it. My blog post about it (link below):

I’m proud to share that @abnormalai was once again named to the 2026 Cyber 60, presented by @FortuneMagazine , @lightspeedvp , and @AWSstartups! This is Abnormal's third consecutive year among the most innovative companies in cybersecurity. This recognition highlights how our behavioral AI approach is solving real, mission-critical problems for security leaders and their teams. Thank you to our customers, partners, and employees who make achievements like this possible!

Thank you @Forbes for hosting me at the at the annual Forbes CIO summit! I shared the trends we are seeing with AI, cybersecurity and #1 cyber crime: Business email compromise

Excited to announce a joint partnership between Abnormal Security and @CrowdStrike. CRWD is investing in @AbnormalSec and today we are launching new bi-directional product integration that enables joint detection and response across our two platforms! abnormalsecurity.com/partner…