Anthropic Says Attackers Are Running Operations on Agent Frameworks, Not Just Asking for Help · Polylog