Security1 publisher2 min readPublished
Anthropic banned a northern Yemen cell that asked Claude why its guided rocket failed
Anthropic's third misuse report says accounts in Houthi-held northern Yemen used Claude Code to write guidance software for three weapons programs, and a weapons analyst doubts the group can build any of them.
The Watch · Security desk
What happened
- Anthropic says Claude users in Houthi-controlled northern Yemen tried to develop advanced missiles, and it blocked the accounts after identifying them.
- Anthropic says the actors used Claude Code in place of human software engineers to write the guidance, navigation and control software.
- Trevor Ball of Armament Research Services said the group has nowhere near the production or technical capability to build a hypersonic missile even if it is asking Claude about one.
Compiled by The WatchSomething wrong?How this is made
Why it matters
- precedent A commercial abuse team's enforcement log is now the public record of a weapons test inside an embargoed territory, published on the vendor's schedule and in the vendor's words.
- constraint The ban stopped the queries and the visibility at the same moment, and the simulation work the cell had already stood up runs without any model platform.
- contradiction Anthropic's account of stated ambition and Ball's assessment of buildable capability point different ways, so the same report supports either a proliferation warning or evidence of a group asking about weapon designs it has no capacity to build.
- exposure Anyone citing this as proof of Houthi weapons development is citing an inference from account geography, because the report does not identify the users.
The detection depended on the users' own habits. They tested a guided rocket, it failed, and they went back to Claude to ask why [3]. Anthropic says they never reached "fielding an operational device" [2]. That follow-up question is what tied a stream of guidance, navigation and control code requests to hardware that had already flown [4].
The company did not name the account holders [6]. The attribution rests on geography: mountainous northern Yemen is controlled by the Iran-backed Houthis [1]. Hazam al-Assad, a member of the Houthis' political bureau, said it is "unreasonable and illogical" that the group would rely on open sources to develop and produce military capabilities [8]. "Our armed forces have modern, diverse and developed production capabilities and technology that it has accumulated over the period of Saudi aggression on Yemen," al-Assad said [9].
Anthropic describes a cell pursuing three programs, among them a multi-variant missile that glides at hypersonic speed and a warhead that uses mobile phone hardware to maneuver mid-course [5]. Trevor Ball, a weapons analyst at Armament Research Services, said the Houthis "might be looking into hypersonic (missiles) by asking Claude" but have nowhere near the production or technical capability to build them, and noted that U.S. hypersonic missiles "are still in testing" [10] [11]. He said the group already has Iranian-made anti-ship missiles that adjust guidance mid-course [12]. "They are probably just trying to develop their own capabilities more, so they are less reliant on Iranian shipments of weapons and components," Ball said in a text message [13].
Adam Baron, a Yemen-focused researcher at the New America think tank in Washington, said the group is routinely underestimated. "There's a tendency to see the Houthis as this group of barefoot tribal fighters, and that's just not true," he said [17].
This is Anthropic's third report on global misuse of its platforms since March 2025. It covers findings from December to August, nine months. The cases run from state-sponsored propaganda groups to unnamed actors researching how to make biological weapons more deadly [14] [15] [16].
Before the accounts were banned, Anthropic says, the users had already built an offline simulation toolkit that does not use Claude or any other computing platform [7]. Closing the accounts ended the vendor's view of the cell, and that toolkit does not need the vendor to keep working [18].
What to watch
- Whether any government or the U.N. panel monitoring the Yemen arms embargo cites Anthropic's report as evidence.
- Whether Anthropic releases indicators other model providers can use, or the same actors surface on a competitor's platform.
- Whether the next misuse report narrows the nine-month lag between the observed activity and publication.