{
 "type": "bundle",
 "id": "bundle--18e68b31-2822-5b8d-98ee-9b59882afb15",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--9242dd55-8e92-5905-9a02-85d5d67251e5",
   "created": "2026-08-26T00:00:00.000Z",
   "modified": "2026-08-26T00:00:00.000Z",
   "name": "Breaking Claude Code Opus 5 Auto Mode",
   "description": "A security researcher showed that a plain request to summarize a website could hijack Claude Code running Opus 5 in Auto Mode. The attacker-controlled site pushed the agent from the WebFetch tool to curl, which downloaded a ZIP archive containing a decoy binary and a malicious Python module. Claude refused the decoy binary, wrote its own decoder, and ran it inside the extracted directory, which triggered the poisoned module and led to remote code execution and a lab C2 callback. Success rates in small samples were 60-80%, and Anthropic closed the report as informative, saying the behavior was working as designed.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-025",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-025/"
    },
    {
     "source_name": "Embrace The Red",
     "url": "https://embracethered.com/blog/posts/2026/breaking-claude-code-opus-5-and-automode/",
     "description": "Breaking Claude Code Opus 5 Auto Mode"
    },
    {
     "source_name": "Simon Willison",
     "url": "https://simonwillison.net/2026/Aug/27/breaking-claude-code-opus-5-auto-mode/",
     "description": "Breaking Claude Code Opus 5 Auto Mode"
    },
    {
     "source_name": "Cyber Security News",
     "url": "https://cybersecuritynews.com/claude-code-opus-5-auto-mode-hijacked/",
     "description": "Simple website summary request hijacks Claude Code Opus 5 Auto Mode"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--c168e495-0590-588d-b1d0-745d95687805",
   "created": "2026-08-26T00:00:00.000Z",
   "modified": "2026-08-26T00:00:00.000Z",
   "name": "A security researcher (wunderwuzzi / Embrace The Red) running a lab attack chain via a malicious website and ZIP archive",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--e12c7475-9594-5035-a95c-2c754d24b8c5",
   "created": "2026-08-26T00:00:00.000Z",
   "modified": "2026-08-26T00:00:00.000Z",
   "name": "Claude Code (Opus 5) in Auto Mode, with its safety classifier, and Anthropic as the vendor",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--ffacc679-8738-5645-a76c-1e69ef88be85",
   "created": "2026-08-26T00:00:00.000Z",
   "modified": "2026-08-26T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--92eebd15-fe66-593d-a2e6-8d3d5e3e9925",
   "created": "2026-08-26T00:00:00.000Z",
   "modified": "2026-08-26T00:00:00.000Z",
   "name": "TA0002 Execution",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0002"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--b30c7209-6b88-52e5-bb4c-4a1933d8fae5",
   "created": "2026-08-26T00:00:00.000Z",
   "modified": "2026-08-26T00:00:00.000Z",
   "name": "TA0005 Defense Evasion",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0005"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--d95cbcc5-6d84-584d-99e4-8ced4d7c5845",
   "created": "2026-08-26T00:00:00.000Z",
   "modified": "2026-08-26T00:00:00.000Z",
   "name": "TA0007 Discovery",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0007"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--e28261f5-2e72-5d4d-a27a-b1fd6e2add85",
   "created": "2026-08-26T00:00:00.000Z",
   "modified": "2026-08-26T00:00:00.000Z",
   "name": "TA0011 Command and Control",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0011"
    }
   ]
  }
 ]
}