Anthropic TI: northern Yemen cell used Claude Code for missile/rocket GNC software
Anthropic’s September 2026 Threat Intelligence report (Detecting and countering misuse of AI; activity December 2025–August 2026) details a northern Yemen weapons-development cell running three programs: a guided rocket using a commodity phone-class flight computer with final-phase homing; a multi-stage ballistic missile with a stated range goal above 2,000 km; and a multi-variant “R2000” set including a hypersonic glide vehicle variant. Actors used Claude Code in place of human software engineers for guidance, navigation and control (GNC) — integrating open-source autopilot onto phone-class flight computers, writing control/position-estimation software, tuning settings, running firmware builds and simulations — and ran multiple Claude instances in parallel roles (code, research, review). Safeguards blocked many requests; actors hid goals/products and split work across sessions. Anthropic does not have evidence they fielded an operational device, but they did test-fire a guided rocket that appears to have failed (they returned to Claude within hours to diagnose). Accounts banned; threat info shared with partners. Actors had already built an offline simulation toolkit that does not rely on Claude or MATLAB. Anthropic does not name the actors; northern Yemen is Houthi-controlled territory (wire coverage notes that context). Distinct from desk cards anthropic-shinyhunters-apk-20260911 and anthropic-gtg20006-midnight-blizzard-20260911 (same TI report, different cases). Primary: Anthropic TI; wire: SecurityWeek / AP.
- Product
- Anthropic Claude / Claude Code (misuse for conventional weapons GNC)
- Versions
- n/a (account misuse; not a product CVE)
- Exploited in Australia?
- unknown
- Patch to
- n/a for end-users; Anthropic banned associated accounts and shared partner intel
Primary: Anthropic — Detecting and countering misuse of AI (Sep 2026 TI) · Vendor: Anthropic Threat Intelligence · SecurityWeek / AP (11–12 Sep 2026)