Shownotes
In this episode of ShadowTalk, Brandon Tirado and John Dilgen look at two recent initial access campaigns that used Anthropic's Claude to gain trust. In the first, attackers turned Claude's real chat-sharing notifications into callback phishing lures. In the second, a tampered Claude Code extension in Cursor's marketplace planted a persistent SSH backdoor on developer machines. Learn what defenders can do now, from hunting for both attacks and reimaging affected hosts to governing developer e...