“1. He left directory listing enabled on his own server, so researchers could figure out who he was with barely any effort.
2. They found files like CLAUDE.md and went through his Claude Code sessions.
3. There were questions like, “Where can I sell this data?”
vibe code heist
It seems a bit premature to declare that AI hasn’t changed the nature of cyberrisk when amateurs are (apparently) successfully and single-handedly hacking into large banks