Low-skilled attacker used Claude Code, Codex to breach 14 companies

Researchers at OALABS analyzed 1,000+ recovered AI agent sessions showing a low-skilled attacker used simple prompts to direct Claude Code and OpenAI Codex to conduct breaches. The agents handled research, vulnerability identification, exploit writing, and data exfiltration, bypassing guardrails with minimal user expertise.