Just when you thought it was safe to go out...
Important: Houthis Used @claudeai @AnthropicAI for Missile Programming
Excerpt from the Detecting and countering misuse of AI: September 2026
GTG-87001: Disrupting a Yemen-based guided weapons engineering cell using Claude to develop guidance software
Summary
We identified a cell of threat actors based in northern Yemen running three weapons development programs: a guided rocket that used a commodity phone-class flight computer with final-phase homing guidance; a multi-stage ballistic missile with a stated range goal above 2,000 km; and a multi-variant missile (referred to as the “R2000” set) that included a hypersonic glide vehicle variant.
The actors used Claude Code in place of human software engineers to develop the guidance, navigation, and control (GNC) software that steers and stabilizes a flying vehicle. For example, they used Claude to integrate an open-source autopilot onto a phone-class flight computer, writing the control and position estimation software, tuning the control settings, running a firmware build pipeline, and performing a flight simulation. The actors managed several Claude instances at once, assigning each one a role, much as a lead would delegate work on a small engineering team: the actors tasked one instance with writing the code, another with research, and a third with reviewing the code the first instance produced.
Our safeguards blocked many of their requests, but not all of them. The actors used a variety of tactics to evade our safeguards, including hiding their goals and the products the software was meant for, and they split their work across multiple sessions so no single session revealed their full intent.
These actors carried out a sustained effort to develop guided weapons, including using Claude to design guidance software. We do not have evidence the actors succeeded in fielding an operational device; but they did test-fire a guided rocket. This field test appears to have failed: within hours, the actors returned to Claude to work out why it failed.
We identified this activity as part of our internal investigations into suspected weapons development. We banned accounts associated with the actors and shared threat information with public- and private-sector partners to mitigate risks posed by the actors. Nevertheless, we have evidence that the actors had already built an offline simulation toolkit that does not rely on Claude or other engineering computing environments such as MATLAB.
Case studies from threat actors disrupted between December 2025 and August 2026 across seven areas of harm, from cyber operations to biological misuse.
anthropic.com
The important distinction is what Anthropic actually claims
A Yemen based cell used Claude Code as a stand in software team for guidance development, splitting the work across sessions so no single conversation revealed the full intent
Anthropic also says it has no evidence the actors successfully fielded an operational device
Both facts matter
The concern is not “AI built a missile”
It is that AI was useful enough to assist real weapons engineering while safeguards could be partially evaded by decomposing the work
That is already a significant capability and governance problem