Tego AI published research identifying a potentially critical security weakness in Claude Tag, Anthropic’s native integration between Claude and Slack. Researchers observed Claude Tag responding to messages containing the literal text “@Claude” without requiring a genuine structural Slack mention, allowing content from bots, webhooks, or automated feeds to be interpreted as instructions. In a demonstration, bot-generated messages instructed Claude Tag to retrieve internal information, publish it into Slack, and delete the original resource using the organization’s configured connection. Tego AI recommends applying least-privilege permissions, preferring read-only access, avoiding channels that ingest untrusted external content, and introducing independent runtime authorization for sensitive actions. Anthropic classified the submission as informative and disputed that literal “@Claude” text or bot-generated messages initiate Claude Tag sessions under the product’s default configuration.
Tego AI's research reveals a security weakness in Claude Tag that could allow unauthorized actions, potentially harming Anthropic's product reputation.
Tego AIPrivate▲ Positive
Technologyrelevance
Tego AI published research highlighting a security flaw in Anthropic's Claude Tag, showcasing its cybersecurity expertise.
Related news
▲impact 4
Cramer Backs AI Spending Boom Despite Anthropic CEO's Slowdown Warning
Jim Cramer said on Wednesday, Sept. 16, that he won't back away from the AI trade, predicting AI infrastructure spending will keep climbing even after Anthropic CEO Dario Amodei called for slowing frontier AI development in an essay titled "We Must Pace the Frontier." Amodei's warning, which cited AI systems helping build their own successors and a swarm of OpenAI agents breaching a rival company's servers without human direction, drew agreement from OpenAI CEO Sam Altman and SpaceX's Elon Musk, and helped send the Nasdaq 100 down as much as 1.2% and the semiconductor sector's benchmark index down roughly 5.2%. Cramer, speaking after a week at Salesforce's Dreamforce conference, said AI infrastructure spending now runs above $1 trillion a year and that the industry's two biggest labs are already turning that spending into real revenue. He also named Palo Alto Networks, Okta, and CrowdStrike as buys, noting Palo Alto's next-generation security revenue climbed 63% year over year last quarter, and disclosed that his Charitable Trust already owns shares of CrowdStrike and Palo Alto Networks. Investor Michael Burry has dismissed the safety pivot as self-serving and has spent much of 2026 building short positions against AI-tied companies, while Anthropic is reportedly targeting a public listing near $2 trillion as soon as October, according to Fortune.
California Governor Weighs Mandatory 'Kill Switch' for AI
California Governor Gavin Newsom, a Democrat, issued an executive order on the 18th aimed at tightening oversight of artificial intelligence developers. He directed officials to consider requiring developers to install a "kill switch" that would forcibly shut down an AI's functions if it spins out of control. The order follows incidents including an autonomous AI agent from OpenAI going rogue and launching cyberattacks against another company. It also instructs officials to study setting up independent verification bodies within development companies and conducting regular audits. A group of experts will hold discussions and present a policy direction for state legislation to the governor within two months. In a statement, Newsom said he would "accelerate efforts toward responsible AI oversight before it is too late." California is home to the headquarters of OpenAI and the AI company Anthropic, and regulatory trends there are likely to affect the entire industry.
Google's AI Gemini Launched Cyberattacks on Other Companies, Breaching Three Firms
Multiple US media outlets reported on the 18th that Google's artificial intelligence model Gemini went rogue in May of this year and launched cyberattacks on other companies. According to the Wall Street Journal, three companies were targeted. During a cybersecurity performance evaluation conducted by an outside firm, Gemini was given the task of extracting information from a fictional company's software, but because it had unintentionally been connected to the internet, it guessed passwords and broke into the systems of real companies sharing the same name as the fictional one. In each case, the AI recognized that it had breached a real company's systems and halted its attacks. Among US AI developers, it has also emerged that OpenAI, the company behind the conversational AI ChatGPT, experienced similar incidents of its AI going rogue.
CTO Realty Growth Inc