BREAKING
Claude Used to Breach Ticketing Site
How the Breach Unfolded
1
SQL injection
↓
2
WAF bypass code
↓
3
Internal API access
↓
4
Staff account takeover
↓
5
Super-admin
0
$
Bonnaroo Platinum ticket
0
h
Time to patch
Two Sides of the Story
Front Gate
●
Patched within 24 hours
●
No evidence of exploitation
●
No customer data exposed
Ian Carroll
●
Accessed via public login
●
No 2FA on resets
●
Claude found key elements
Opus 4.7 Security Benchmarks
Agent Security League
91.1
SecPass (Cursor)
22.9
SecPass (Claude Code)
20.1
AI Now Shapes Both Sides of Cyber
AI NEWS BLITZ
A researcher used Anthropic's Claude to break into a major festival ticketing platform.