Captured logs show hackers compromising & remotely using Claude Code / OpenAI Codex agents for real breaches, recon, exploitation, and data exfil (OALabs research blog with session logs, HN mentions, ~June 16).

Why It Matters

AI coding agents aren't just tools--they get stolen, installed on attacker infrastructure, and turned into autonomous hacking co-pilots. Concrete logs from a compromised developer instance reused against 17+ orgs. Changes security culture and "AI autonomy" reality.

Evidence

Source evidence is in the linked daily scan.

Signal Read

Source Trail

Daily scan: 2026-06-17

• research.openanalysis.nethttps://research.openanalysis.net/claude/codex/hacking/ai%20hacking/llm/redteam/policy%20violation/2026/06/16/compromised-claude-hacking.html