Rules fail at the prompt, succeed at the boundary
This was not a theoretical demonstration in a controlled environment; it was a live, sophisticated espionage campaign. The attackers masterfully hijacked an existing agentic setup, combining Claude’s capabilities with tools…

