The BuddyBoss Attack: Claude’s Supply-Chain Attack

A French threat actor used Anthropic’s Claude AI to orchestrate a sophisticated supply-chain attack against the BuddyBoss WordPress ecosystem, bypassing security controls to deploy backdoored updates that compromised 246 websites worldwide, exfiltrating sensitive data—including databases and live Stripe payment keys—from victims who were following security best practices.