Anthropic’s Claude Code Security Tool Triggers Cybersecurity Stock Selloff

Anthropic has introduced Claude Mythos, also known as Fable 5, touting stronger code-analysis and vulnerability-detection capabilities. Such models can help defenders patch smart contracts but may also lower the technical barriers to launching cyberattacks, fueling concerns in the crypto community about the security of assets and protocols.

Anthropic said the new model includes general-purpose safety safeguards and routes cybersecurity-related queries to a specialized model to reduce the risk of misuse. The Uniswap founder, however, criticized the design of its “safety filter” as poorly calibrated. Related reports did not disclose the exact release date, any losses or the value of assets affected.

Anthropic’s Claude Code is a development environment that uses generative AI to help developers read and write code and operate tools. Prompt injection can override a user’s intent if the system mistakes text in a GitHub repository for trusted instructions. Microsoft said the flaw posed a significant risk because CI/CD systems often hold highly privileged credentials such as deployment keys and cloud tokens.

Microsoft security researchers recently disclosed that attackers could hide malicious prompts in GitHub content, inducing Claude Code to execute unintended commands and send CI/CD credentials to an external destination. Anthropic has patched the flaw. Users of version 2.1.128 and earlier are advised to upgrade immediately to reduce the risk of compromise to software supply chains and deployment environments.

Claude Code GitHub Actions allows AI agents to respond to instructions and modify code within software-development workflows. If trigger identities and permissions are not rigorously checked, attackers could use malicious content to induce an agent to access sensitive information such as GitHub tokens. That could compromise code repositories and automated deployment environments, making the patch important for software supply-chain security.

Anthropic patched a permission bypass in Claude Code v1.0.94 caused by insufficient checks on GitHub App triggers. It also strengthened configuration controls and safeguards to reduce the risk of token leaks. Available information did not disclose the exact dates of the vulnerability advisory or patch, the number of affected organizations, any financial losses or known cases of exploitation.

Claude Code is Anthropic’s AI development assistant, with direct access to project files, command execution and development environments. A breach of its trust boundaries could therefore put source code and identity credentials at risk. Cybersecurity company Check Point found vulnerabilities in the tool’s project configuration and sandbox mechanisms, highlighting the supply-chain risks that arise when AI coding tools process external content.

Check Point recently disclosed that attackers could plant a malicious configuration file in a project, triggering remote code execution (RCE) and the theft of API keys when a user opened it with Claude Code. Two other sandbox-escape vulnerabilities had existed for nearly six months. Anthropic has patched the flaws, but researchers criticized the company for not proactively disclosing details. Users were advised to upgrade to version 2.0.65 or later.

Anthropic’s Claude Code is an AI development agent that can read and write code and connect to external tools, while the Model Context Protocol (MCP) links it to data and services. If OAuth tokens are exposed, attackers can assume a developer’s privileges, bypass passwords and multi-factor authentication, and tamper with GitHub repositories. This could turn a compromise of a single device into a software supply-chain attack.

Cybersecurity firm Mitiga disclosed on May 8, 2026, that Claude Code stores MCP configurations and OAuth tokens in plaintext in ~/.claude.json. A malicious NPM package could use a postinstall script to rewrite server addresses and trust flags, redirecting traffic through an attacker-controlled proxy to steal reusable, automatically refreshed tokens. Anthropic said the attack would first require local code-execution access and did not include the issue in its remediation work.

Traditional static analysis relies heavily on existing rules, making it prone to missing contextual vulnerabilities involving business logic or access controls. Anthropic is using Claude to understand entire codebases in an effort to embed security reviews into development workflows. If companies cut spending on existing tools, the valuations of platform providers such as CrowdStrike and Palo Alto Networks, as well as financial institutions' procurement decisions, could be affected.

Anthropic launched a limited research preview of Claude Code Security for enterprise customers on February 20, 2026. Pricing was not disclosed, while open-source maintainers can apply for free access. Claude Opus 4.6 has identified more than 500 vulnerabilities. On February 23, CrowdStrike, Datadog and Zscaler fell about 11%, Fortinet and Okta dropped about 6%, and Palo Alto Networks declined 3%.

COBOL still supports critical systems used by U.S. banks, ATMs, Social Security and the aviation industry, with many of those programs running on IBM mainframes. Modernizing these systems has long depended on consultants to assess and refactor code. If Anthropic’s Claude Code can automate that work, it could undermine IBM’s maintenance services, software ecosystem and pricing power.

Anthropic said on February 23, 2026, that Claude Code could automate the most labor-intensive discovery and analysis stages of COBOL modernization. The announcement triggered a selloff, with IBM shares closing down 13.2% at $223.39 that day. It was their largest one-day decline since October 18, 2000, while the stock’s cumulative February loss exceeded 26%.

Anthropic’s Claude Code is an AI tool that helps developers read code and generate and execute commands. Its exposure to prompt injection shows how a model that mistakes external content for instructions could bypass safety restrictions. The incident also has implications for Nvidia’s and TSMC’s strategies in AI chips, silicon photonics and advanced packaging, underscoring that software and hardware security have become shared concerns across the AI ecosystem.

The latest report said a cybersecurity company had found a prompt-injection vulnerability in Claude Code that could bypass safety restrictions, potentially allowing attackers to influence the model’s behavior through specially crafted content. As of July 20, 2026, the provided material did not identify the cybersecurity company or disclose the vulnerability identifier, discovery date, affected versions or financial losses. It also provided no figures for Nvidia’s or TSMC’s related investments or mass-production schedules.

Anthropic is extending generative AI from coding into cybersecurity testing, posing potential competition to traditional security software providers that rely on rules-based detection and subscription models. Claude Code Security can analyze software components and data flows to identify complex vulnerabilities involving business logic and access controls, though fixes still require human approval. The launch prompted investors to reassess the pricing power and growth prospects of companies including Cloudflare and CrowdStrike.

Anthropic launched Claude Code Security as a research preview on February 20, 2026, and invited enterprise users to apply for access, saying Opus 4.6 had identified more than 500 critical vulnerabilities. Cloudflare fell 8.1% that day, CrowdStrike dropped 8% and a cybersecurity ETF lost 4.9%. On March 31, a Jefferies survey of 30 chief information officers found that none planned to cut cybersecurity budgets and redirect the money to AI.

Traditional static analysis relies heavily on established rules and can miss flaws involving data flows across components, business logic and access controls. Security teams also struggle to process large vulnerability backlogs. Anthropic has therefore integrated Claude’s code-reasoning capabilities into defensive workflows, enabling AI to scan and validate code and propose patches, though developers must still approve any fixes.

Anthropic launched the Claude Code Security research preview on February 20, 2026. Powered by Claude Opus 4.6, it scans and validates code and proposes patches, and has identified more than 500 vulnerabilities in open-source projects. The company released a six-stage reference workflow on May 27. As of May 22, it had disclosed 1,596 vulnerabilities, 97 of which had been fixed.