Episode Details

Good day %%first_name%%. Anthropic published eight months of receipts on what people actually tried to build with Claude this year, and a fair chunk of it reads like a weapons catalogue. Y Combinator's Garry Tan went on CNBC to tell Washington to stop legislating off a movie plot. And Meta, having spent a year deleting its managers, is now asking for volunteers to be managers again. Also in here: the App Store choking on software nobody asked for, and seven founders agreeing that the money is somewhere deeply unglamorous.

Claude Wrote Missile Software in Yemen

Anthropic

What happened: Anthropic published its September threat intelligence report, covering December 2025 through August 2026 and sorting misuse into seven categories. The conventional-weapons section is the one that stops you: a cell of threat actors in northern Yemen put Claude Code where human software engineers would normally sit, working on guidance, navigation and control software for three missile programmes -- including a multistage design with a target range over 2,000 kilometres. Anthropic says it has no evidence they fielded an operational device, but they did test-fire a guided rocket. Elsewhere: Russia-based freelancers building control software for a swarm of FPV loitering munitions meant to learn from Ukrainian combat footage, and an Iranian unit shipping surveillance code dressed up as a prayer-times app. The models involved were Haiku, Sonnet and Opus; The Decoder notes that Fable and Mythos turn up in a single distillation case and nowhere else.

Why it matters: This is not a leak or an expose. It is the vendor publishing, in its own words and on its own domain, a list of the things its product was pointed at. Nothing here required a breakthrough. It required a person who already understood missiles, a credit card, and a coding assistant that does not ask what the project is for. If you have ever wondered what "general-purpose" actually means when a sales deck says it, this is the honest answer: the same tool that writes your invoice reminders will write flight control software for whoever types the prompt.

What everyone's saying: Bloomberg broke the weapons angle and most coverage followed it there -- the Reuters factbox is the cleanest free summary of the individual cases. On Hacker News, where the report drew a couple of hundred comments, the top reply simply listed the datelines back at Anthropic -- Yemen, Russia, China, China, Russia, China -- and asked about the double standard. The second-most-liked observation was more practical: if you were seriously building a bioweapon, why would you do it on a hosted service that reads your chat?

My read between the lines: The weapons are the headline. The distillation section is the business story, and it is wilder. Anthropic says Moonshot AI relayed close to 300,000 of its own customers' requests to Claude over ten days, across 5,380 fraudulent accounts, while those users believed they were talking to Kimi. DeepSeek did a version of the same thing -- detecting requests coming from tools like Claude Code, flagging those users, and routing selected ones to Opus, more than 12.1 million exchanges in fourteen days. Those relayed sessions carried names, email addresses and company data belonging to hundreds o