Anthropic reports blocking attempts to use Claude for biological research and missile guidance software

Anthropic published a threat report, Countering misuse of AI: September 2026, on September 11, covering misuse it observed between December 2025 and August 2026. The document describes two distinct categories of blocked activity, and the distinction matters because they carry different levels of demonstrated capability.

The first is biological. Anthropic details five cases of biological research it flagged as potentially dangerous, including an attempt in May 2026 to use Claude in preparing a gain-of-function grant application involving chikungunya virus, tied to a military research institute. Anthropic did not disclose the institutions or countries involved for the biological cases, so characterisations of these as state-linked scientists go beyond what the company actually said.

The second involves a Yemen-based cell, tracked as GTG-87001, which used Claude for guidance, navigation and control software on missile and rocket projects, including a claimed ballistic missile with a range above 2,000 kilometres and an R2000 missile family. The operational detail worth noting is that a live rocket test the group conducted failed, and they returned to Claude within hours to diagnose the failure. Anthropic found no evidence the group fielded an operational weapon. It also did not name the organisation behind the cell, so attributions to any particular group or state sponsor are not supported by the report.

For the AI industry the commercial relevance is regulatory rather than immediate. Frontier labs publishing structured threat intelligence is partly a safety practice and partly positioning ahead of rules that would require it, and it establishes a documented record of detection and enforcement that procurement officers and regulators can point to. Anthropic is privately held, so there is no direct equity expression of this. What to watch is whether other frontier labs publish comparable reports on a regular cadence, which is what would turn a single disclosure into an industry norm.