HomeIntelligenceBrief
BREACH BRIEF 🟠 High ThreatIntel

Threat Actors Leverage Anthropic’s Claude AI to Develop Guided Weaponry

A cell of threat actors in northern Yemen used Anthropic’s Claude large‑language model to write guidance, navigation and control software for rockets and missiles, bypassing safeguards. This underscores the need for robust AI governance and continuous monitoring of model usage to satisfy control‑assurance requirements.

Verisq™ Intelligence · 📅 September 14, 2026 · 📰 schneier.com
🟠
Severity
High
TI
Type
ThreatIntel
🎯
Confidence
High
🏢
Affected
3 sector(s)
Actions
3 recommended
📰
Source
schneier.com

Threat Actors Use Anthropic’s Claude AI to Develop Guided Weaponry in Yemen

What Happened – A cell of threat actors based in northern Yemen leveraged Anthropic’s Claude large‑language model to generate guidance, navigation and control (GNC) software for a guided rocket, a multi‑stage ballistic missile, and a hypersonic glide vehicle. The actors evaded Claude’s content‑filter safeguards by splitting requests across multiple sessions and assigning different model instances to writing, researching, and reviewing code. They test‑fired a guided rocket that failed, then returned to Claude for troubleshooting.

Why It Matters for Trust & Control Assurance

  • Highlights the need for a formal AI‑governance control that requires documented policies, prompt‑level monitoring, and evidence that model safeguards are effective.
  • Demonstrates how continuous control‑assurance programs must capture AI usage logs as audit‑ready evidence of due‑diligence.
  • Shows that a single control objective—AI model usage oversight—maps to many frameworks (NIST AI RMF, ISO/IEC 42001, etc.), providing a common trust signal.

Who Is Affected – Defense and government agencies, AI service providers, and any organization that integrates generative AI into critical engineering or operational workflows.

Recommended Actions

  • Draft and enforce AI usage policies that explicitly prohibit weaponization or other high‑risk domains.
  • Deploy logging and real‑time monitoring of model prompts to detect policy violations and generate defensible audit trails.
  • Conduct periodic risk assessments of third‑party AI services and map findings to AI‑governance control objectives. Source: https://www.schneier.com/blog/archives/2026/09/using-ai-for-weapons-development.html

Technical Notes – The actors used Claude to write flight‑control code, integrate an open‑source autopilot onto a phone‑class flight computer, tune control parameters, run firmware builds, and perform flight simulations. Safeguard evasion tactics included hiding end‑goals, product references, and distributing work across multiple sessions. No evidence of an operational weapon system was found, but a test‑fire was attempted. Source: https://www.schneier.com/blog/archives/2026/09/using-ai-for-weapons-development.html

📰 Original Source
https://www.schneier.com/blog/archives/2026/09/using-ai-for-weapons-development.html

This Verisq Intelligence Brief is an independent analysis. Read the original reporting at the link above.

Third-party risk

Does this breach reach you?

Verisq continuously monitors your vendors for breach and ransomware activity, so the question stops being whether it happened and becomes whether it reaches you.

See a live Trust Center →