Low-skill attacker rode Claude and Codex to 14 corporate breaches
OALABS recovered over 1,000 agent sessions from a compromised server because the attacker botched his own opsec: he copied Claude Code and Codex onto a machine he didn't own. Feeding them vague prompts like "recon this," he breached at least 14 companies while the agents did reconnaissance, exploit writing, and data theft, skipping guardrails by claiming authorized red-team work. The skill floor for offensive operations just collapsed: framing, not expertise, is the operative barrier now.