- OALABS analyzed a novice attacker’s full working directory showing 14 breaches carried out with Claude Code and Codex agents
- Attacker used vague prompts; AI agents handled reconnaissance, exploit writing, and data harvesting, bypassing guardrails with ease
- Logs revealed attacker’s identity and location in Addis Ababa, Ethiopia
A newbie cybercriminal managed to break into 14 organizations and steal sensitive data, just by using Anthropic’s Claude Code and OpenAI’s Codex agents. This is according to cybersecurity researchers OALABS, who recovered and analyzed the attacker’s entire working directory.