Earlier this year, an Iran-linked actor used Anthropic’s Claude artificial intelligence model to scrape and analyze data with the aim of helping target U.S. naval forces in the Middle East. A group in Yemen – very likely Iranian-backed Houthi militants – also used Claude to assist with work on guidance systems for ballistic and hypersonic missiles.

These are just some of the revelations about how adversaries and other malign actors have been using one of the premier pieces of AI software being developed in the United States that were contained in a new report Anthropic released late yesterday. The 154-page document also details instances where Claude was used directly and indirectly to support intelligence gathering and surveillance, cyberattacks, influence operations, and even worrisome biological research over the past eight months. In addition to Iran and Yemen, the human actors behind these activities were based in Russia, China, and a host of other countries.

Anthropic has shared details about what it calls the “misuse” of its models in the past, but describes the new report as its “most detailed” to date. The company has clearly been cataloging these case studies, and has assigned each one a control number. Though the entire contents of the report are cause for concern, the explicit attempt to use Claude to target American forces, as well as to develop new higher-end missiles and other military technology, are particular standouts and signs of what’s to come, as we will highlight below.

GTG-30005: Military reconnaissance

GTG-30005 is the case study dealing with the targeting of U.S. naval forces, and the summary is as follows:

“In another investigation, we identified and disrupted an Iran-nexus threat actor that used Claude to collect and analyze publicly accessible data to develop targeting recommendations against US naval forces in the region. The threat actor used Claude to compile targeting handbooks, through a Python pipeline the threat actor built with Claude’s assistance, to identify and track naval positions based on open-source information. The compiled material included a roster of US personnel scraped from captions on public military photographs; publicly accessible ship and aircraft transponder identifiers; commercial satellite-imagery query scripts; and an inventory of public websites that exposed US naval movements. The threat actor also directed Claude to compile vulnerability research on shipboard systems, cataloging known CVEs in maritime VSAT terminals, Cisco communications equipment, and industrial control products.”

“We banned the actor’s account, developed detections to reduce the risk of future misuse, and shared threat intelligence with government authorities to disrupt the threat.”

How exactly Anthropic defines the term “nexus” here is not immediately clear, and other entries in its new report also use “state-nexus” in addition to country-based variations. However, in this specific case, an addendum is added to the entry that explicitly says that the same account was separately tied to “domestic mass surveillance” software development work “for Iranian state systems,” clearly pointing to an actor directly linked to the regime in Tehran.

Whether or not any of the data collected and analysed here was directly used to subsequently carry out attacks on U.S. forces is unknown. However, there have been media reports just in recent weeks that Iran has been increasingly trying to strike American warships. Those same reports have raised questions about how the country has been prosecuting those operations given its limited capabilities and capacity to track maritime targets far from its shores. The possibility that Russia or China could be supplying targeting data has been put forward.

The use of AI technology by nation-state armed forces to develop target sets and engage them is already known to be growing globally. The Israel Defense Forces (IDF) have been a pioneer in this regard, but the U.S. military, China’s People’s Liberation Army (PLA), and others are also known to be developing and fielding these capabilities.

U.S. military officials have also voiced increasing concern in recent years about the ability to track the movements and disposition of U.S. military assets and personnel using publicly available pictures and other data. There has been much talk, in turn, about how to balance transparency and operational security.

GTG-87001: Disrupting a Yemen-based guided weapons engineering cell using Claude to develop guidance software

Anthropic’s new report details an instance where an individual in Yemen used Claude as part of missile guidance work, which is given the control number GTG-87001.

“We identified a cell of threat actors based in northern Yemen running three weapons development programs: a guided rocket that used a commodity phone-class flight computer with final-phase homing guidance; a multi-stage ballistic missile with a stated range goal above 2,000 km; and a multi-variant missile (referred to as the “R2000” set) that included a hypersonic glide vehicle variant.”

“The actors used Claude Code in place of human software engineers to develop the guidance, navigation, and control (GNC) software that steers and stabilizes a flying vehicle. For example, they used Claude to integrate an open-source autopilot onto a phone-class flight computer, writing the control and position estimation software, tuning the control settings, running a firmware build pipeline, and performing a flight simulation. The actors managed several Claude instances at once, assigning each one a role, much as a lead would delegate work on a small engineering team: the actors tasked one instance with writing the code, another with research, and a third with reviewing the code the first instance produced.”

“Our safeguards blocked many of their requests, but not all of them. The actors used a variety of tactics to evade our safeguards, including hiding their goals and the products the software was meant for, and they split their work across multiple sessions so no single session revealed their full intent.”

“These actors carried out a sustained effort to develop guided weapons, including using Claude to design guidance software. We do not have evidence the actors succeeded in fielding an operational device; but they did test-fire a guided rocket. This field test appears to have failed: within hours, the actors returned to Claude to work out why it failed.”

“We identified this activity as part of our internal investigations into suspected weapons development. We banned accounts associated with the actors and shared threat information with public- and private-sector partners to mitigate risks posed by the actors. Nevertheless, we have evidence that the actors had already built an offline simulation toolkit that does not rely on Claude or other engineering computing environments such as MATLAB.”

As mentioned earlier, the report does not name the Houthis, but that group has historically been based primarily in the northern end of Yemen. It is also the only entity in the country known to have active missile development programs, which are conducted with critical support from Iran.

Whether this particular work directly resulted in any new capabilities is unknown. Anthropic notes that there looked to be at least one failed test launch before the accounts were banned, which would have occurred sometime after the beginning of this year, based on the stated cutoff dates for the report. By the end of 2025, the Houthis had already amassed a wide array of very real ballistic missiles, including types with at least claimed ranges of 2,000 kilometers (approximately 1,242 miles). The group also has a variety of cruise missiles and one-way attack drones that it has employed operationally.

Still, being able to leverage Claude could only have helped any domestic missile development efforts in Yemen, which might help reduce dependency on Iran, at least to a degree. Furthermore, developing functional hypersonic glide vehicles capable of prolonged stable flight has historically been notoriously difficult, even for entities with extensive relevant knowledge bases on an organizational level.

GTG-17001: Disrupting a China-based operation using Claude to draft a fire control specification and acquisition documents for undersea warfare

Use of Claude in foreign military endeavours goes beyond the Middle East, as evidenced by case study GTG-17001. This involved a Chinese actor conducting work related to a naval counter-torpedo defense system.

“We identified a China-based threat actor who used Claude to advance three parallel tracks of work on an anti-torpedo weapons system:”

• “First, the actor used Claude to draft a Chinese-language specification for an anti-torpedo fire control system (the core logic that aims and times an anti-torpedo weapon’s response). The document was written to win approval from a Chinese defense manufacturer, which would move the work on to technical certification and operational testing.”
• “Second, the actor used Claude to produce a Chinese-language technical proposal of more than 200 pages, accompanied by an executive briefing deck.”
• “Third, the actor used Claude to benchmark their own system against specific US anti-torpedo and anti-submarine programs based on publicly accessible information. They then generated a Chinese-language briefing on US Navy systems derived from open-source reporting.”

“The actor presented themselves as an original equipment manufacturer in the US defense sector. We assess the actor was associated with a Chinese defense industry manufacturer aiming to produce a weapons specification and acquisition proposal for the People’s Liberation Army Navy.”

“The actor used Claude to write the acquisition proposal, refining it over many drafts. After each draft, the actor instructed Claude to role-play a hostile expert reviewer to critique the proposal, then used that feedback to sharpen the next version. In parallel, the actor used Claude to build pieces of the anti-torpedo weapons system’s fire control software and a test matrix to validate them.”

“The operational lift the actor achieved was a function of using Claude to automate complex technical outputs. The actor leveraged the model to compress the development timelines for the certification registry, compliance documentation, and automated fire control logic. The actor also accelerated the traditional human review cycle by having Claude critique the acquisition proposal across multiple rounds of review while role-playing a persona.”

“We uncovered this activity as part of our internal investigations into suspected weapons development. We cannot attribute the activity to a specific entity or actor. But we have banned the account for violating our Supported Regions Policy and our Usage Policy, which prohibits weapons design and development, and incorporated our investigative findings into our safeguards to mitigate the risk of future misuse.”

Anthropic’s report does not name the U.S. programs leveraged here, but does note the information in question was publicly available. Anti-torpedo systems for surface warships and submarines have been an area of significant interest for the U.S. Navy for years now. Those developments have also produced compact torpedo designs for use in other applications.

The PLAN’s interest in these same kinds of capabilities is not at all surprising. Underwater threats and countermeasures to them, broadly speaking, would play a central and vital role in any future conflict between the United States and China across the broad expanses of the Pacific.

GTG-27005: Disrupting a Russia-based operation using Claude to engineer an autonomous military drone swarm

Another case study, GTG-27005, details the use of Claude by Russian actors working on drone swarming technology.

“We identified likely freelance Russia-based threat actors who set out to build a full-stack autonomous first-person-view (FPV) kamikaze drone swarm. The actors used Claude Code to write and test the code and save it directly into the actors’ own project files. In addition to Claude Code, the actors used a software-in-the-loop simulation stack and a rented graphics processing host for model training. They called the operation ‘DronDoc’ or ‘Serafim.'”

“The actors used Claude to build the core software system, including the drones’ shared swarm memory and fault-tolerant coordination logic (FTCL); an onboard small language model to govern attack, observe, and return-to-base behaviors; a terminal guidance software system to steer drones to their target (using the onboard camera) and issue the call to detonate; a control-link geolocation module to find opposing drone operators; a passive acoustic detection layer; and low-level logic for the drones’ programmable chips. The actors designed the platform for autonomous lethal engagement; the onboard model could select targets (including a ‘person’ target class) and issue detonation commands without a human in the loop. The actors’ activity—including flashing the low-level firmware to live development boards, provisioning single-board computers, and wiring up a simulation environment over a mesh network—confirmed that they were using real hardware-in-loop testing within their sessions.”

Many were surprised yesterday by the news that a Russian fiber-optic FPV drone flew into Kramatorsk and attacked a car.

But there is nothing surprising here. The war of 2025 is already very different from the war of 2024.
From LBZ to Kram — 20 kilometers. Enemy FPVs can fly even… pic.twitter.com/hTfhJFPcxZ

— Richard Woodruff (@frontlinekit) October 6, 2025

“The actors trained a computer vision classifier on scraped Ukrainian combat footage, splitting the target classes into “enemy” and “friendly,” and allow-listing Russian systems. They also repeatedly used a fixed coordinate in Donetsk Oblast as the demonstration strike point, with front-line cities and corridors in Ukraine as the mission geography.”

“The actors created their accounts between late 2025 and early 2026 and started the operation in mid-May 2026. The actors circumvented our geographic access controls by routing traffic through commercial virtual private servers.”

“We assess the actors were a small, specialized freelance team doing a mix of civilian and military work, not a Russian state entity. We identified nine accounts associated with this group; eight were used only for ordinary freelance work, not weapons-related software development. Based on our investigation, we assess the actors had ties to a regional university with a federal research center associated with the Russian Academy of Sciences. The actors claimed to have received funding from Russia’s Advanced Research Foundation, National Technology Initiative, and Ministry of Defence, though we cannot verify those claims. We identified this activity as part of our internal investigations into suspected weapons development, we banned accounts associated with the actors, and have incorporated our investigative findings into safeguards to reduce the risk of future misuse.”

Anthropic’s report included a table, reproduced below, detailing different types of drones and other capabilities that were fed into the model as part of this work.

Also, while Anthropic said it could not confirm any direct ties in this instance to the Russian government, the work described here is fully in line with capabilities that have already been demonstrated to varying degrees in Ukraine in the past few years. TWZ has been very closely tracking developments on both sides of the conflict when it comes to new automated targeting and swarming capabilities for shorter- and longer-ranged kamikaze drones. In 2024, we also published a detailed feature outlining a coming revolution in drone warfare, signs of which were already emerging then, thanks to AI and the ever-lowering barrier to entry for leveraging that technology.

GTG-17002: Disrupting a China-based operation using Claude to build targeting software for electronic warfare and air defense suppression

The last case study in the Conventional Weapons section of Anthropic’s new report, GTG-17002, covers electronic warfare-related work by a Chinese actor, with a particular focus on potential air defense targets in Taiwan.

“We identified a China-based actor who used Claude’s chat, coding, and agentic work tools to design, build, and iterate on a Chinese-language suite of about 16 modules for electronic warfare, using the electromagnetic spectrum to detect, jam, or deceive an opponent’s radar and communications, and for suppressing an opponent’s air defenses.”

“The actor used Claude to build the software system, from the underlying logic to the user interface, and iterated through 12 versions. This included implementing and optimizing the system’s radar detection and jamming physics, generating a vulnerability analysis module, and drafting Chinese-language targeting instructions. The software suite the actor built analyzed an opponent’s radars, surface-to-air missile sites, command posts, and communications nodes, then computed their detection coverage, assessed the effectiveness of jamming, ranked targets by value and vulnerability, including which to suppress first, and determined how best to assign jammer sorties to targets across multi-day campaigns. The suite also ranked which of an opponent’s assets to suppress first, and modeled specific engagement envelopes, including those of Patriot and THAAD-class [Terminal High Altitude Area Defense] systems.”

“Mid-project, we observed the actor change the simulation’s default scenario to 12 targets in Taiwan. The targets included a command bunker in Taiwan, an early warning radar site, Patriot and Tien Kung [surface-to-air missile] batteries, major air bases, and a regional combatant command headquarters.”

“The actor also ran a self-hosted model on an internal network alongside Claude and connected the software suite to this model through a tool-use integration.”

“Based on our investigation, we assess the actor is a China-based defense and military-industrial researcher. Account-level metadata and content flagged by our safeguards indicated the actor was linked to PRC research institutions, including the PLA Academy of Military Sciences. We detected this activity as part of our internal investigations into suspected weapons development, we banned accounts linked to the actor, and have incorporated our investigative findings into our safeguards to reduce the risk of future misuse.”

An accompanying table, seen below, mentions several specific types of U.S.-made air defense radars, as well as the Link-16 datalink network, as having come up in the course of this work. Electronic warfare variants of the Chinese Y-8 and Y-9 aircraft, as well as the J-16D electronic warfare jet, and what appears to be a reference to the Golden Eagle drone helicopter, are also mentioned.

The suppression of enemy air defenses is an essential part of any modern air campaign, whether conducted independently or as a part of a larger operation. This would be no less critical in any military intervention against Taiwan from the mainland, or any other larger-scale conflict the PLA might find itself in.

Guardrails and ethics

Beyond the details in any of the specific case studies, Anthropic’s new report underscores growing broader concerns about guardrails for the use of AI and general ethics surrounding the technology. As noted in the instances above, Anthropic has also implemented various safeguards to try to block access to Claude from certain regions and/or to prevent the model from conducting certain types of work. At the same time, what the company has now shared makes clear that those protections can still be circumvented to a significant degree, at least for now.

For its part, Anthropic has been publicly supportive of transparency laws and regulation, at least within the United States. The company also notably made tweaks to certain Claude models earlier this year to address U.S. government cybersecurity concerns.

Starting in December 2025, Anthropic has also been very publicly embroiled in a dispute with the Pentagon over the potential use of Claude to support mass surveillance and fully autonomous weapon systems. This subsequently led to the company being designated a supply chain risk, and limitations being imposed on the use of that model within the U.S. military and elsewhere across the U.S. government. Anthropic is continuing to fight that action in court. However, just yesterday, Under Secretary of Defense for Research and Engineering and the Pentagon Chief Technology Officer Emil Michael said the U.S. military had scaled back the use of Anthropic’s products in support of classified work by 90 percent.

Anthropic is still a designated Supply Chain Risk at @DeptofWar and for the Defense Industrial Base. Thank you for your attention to this matter!

— Under Secretary of War Emil Michael (@USWREMichael) September 3, 2026

The concerns about ‘misuse’ outlined in Anthropic’s new report apply, in general terms, to publicly accessible models being developed by other companies, too. There have already been publicly disclosed instances of AI agents themselves engaging in hacking and other malign behavior in order to complete assigned tasks, raising additional questions about security and public safety, not to mention ethics.

TWZ has noted in the past that America’s adversaries are likely to be less worried about ethics, in general, when it comes to AI. Anthropic’s new report also shows there are few bounds to what state-aligned or even non-state actors might seek to use this technology for, including the development of potential weapons of mass destruction.

At the same time, AI models like Claude are not going away, and developments continue to advance at an ever-quickening pace, opening the door to further proliferation. Developments are rapidly intermingling globally, with companies in China notably leveraging models created in the U.S. to further their own work, which is then released publicly. The technology will increasingly become more integrated and critical to most aspects of military operations and weapons development, alongside its commercial and civilian applications. It is just as much a superweapon as anything else, and the country with the more capable models, and the willingness to deploy them, will have a major edge in future conflicts.

With all this in mind, it seems very plausible, if not probable, that the case studies described in Anthropic’s new report are just the tip of an approaching iceberg that will need a concerted effort to tackle.

Contact the author: joe@twz.com

The post Adversaries Using Claude AI To Target Americans And Develop Missiles Is A Sign Of What’s To Come appeared first on TWZ.

After pulling into Thailand looking very much like it just spent 286 days at sea, the U.S. Navy’s supercarrier USS Abraham Lincoln is now getting much-needed TLC. When the Lincoln arrived in the Thai port of Laem Chabang on Sept. 2, it had so-called “running rust” and algae caked all along the sides of the hull. Other parts of the ship, especially around the edges of the flight deck and sponsons on either side, also looked rough. The ship’s condition was a stark, visible reminder of the hardships endured by the carrier and its crew during a long deployment that included a key role in the war against Iran.

Video emerged on social media of local workers cleaning the carrier. Two of them can be seen on a scaffolding platform, dressed in silver-colored protective clothing, yellow helmets, face shields and black boots, spraying the side of the big ship. You can see that most of the rust, as well as all of the green swath of algae, was removed from the section where they are working.

The camera also pans across the ship, showing the extent of the work still needed. 

Those recent viral rust photos/footage of the USS Abraham Lincoln (CVN-72) in Thailand overstated the story.

Yes, the hull looked rough in pictures, but the ship itself was never in question, that's the part the headlines skipped.

Today at Laem Chabang Port in Thailand, local… pic.twitter.com/b8SP2oyrJZ

— Comandante (@commandante_) September 4, 2026

It is unclear whether this work had already been scheduled as part of routine maintenance or whether it had been ordered after images of the ship emerged showing its rough condition. The ship was a huge focus of attention even before it got to Thailand.

Lincoln and Carrier Strike Group 3 took part in the opening salvo of strikes on Iran on February 28 as part of what the U.S. military dubbed Operation Epic Fury. Lincoln and the rest of the strike group continued to support Epic Fury and subsequent operations against Iran for months thereafter. The decision was finally made to rotate the carrier out of the region last month following a raft of reports of severely flagging morale and mental health among the crew. One sailor had to be rescued last month after deliberately jumping overboard. There were reports that at least one other individual onboard had attempted to do the same. President Donald Trump and Defense Secretary Pete Hegseth, among others, have pushed back on concerns about mental health and other issues on the ship.

Interest in the Lincoln flared up anew after it arrived in Thailand due to its condition, as well as intense curiosity about how the crew would fare in a Thai port call after being at sea for so long.

As we noted in our initial story about the Lincoln’s arrival in Thailand, running rust on U.S. Navy ships has sparked criticism over the years, including from President Donald Trump. This is in part due to the negative optics of such visible wear and tear on American naval vessels, especially during calls in foreign ports.

“It’s terrible. I think they should be ashamed,” John Phelan told members of Congress at a hearing last year, when he was then-nominee for Secretary of the Navy, after being shown pictures of a very worn-looking Arleigh Burke class destroyer, the USS Dewey, during a stopover in Singapore. “Would you want to go on that ship?”

One driving factor in the condition of ships like Lincoln is the operational tempo of deployments, a Navy official noted earlier this year.

“We know what to do, but we choose not to do it,” Mark Lattner, director of the Navy’s Ship Integrity and Performance Engineering, Naval Systems Engineering Directorate, said in January during a panel at the Surface Navy Association’s annual symposium that TWZ attended. “And we choose not to do it because there’s always some other problem I’ve got to fix. I don’t have time. Our corrosion can wait. And so we don’t implement the fixes.”

Finding a solution to the Navy’s rust problem became one of Lattner’s main missions in the wake of the fallout from Trump’s late-night texts to Navy officials demanding answers about the condition of the Arleigh Burke class guided missile destroyer USS Dewey after he saw pictures of it covered in running rust as it pulled into Singapore last year.

Port calls offer critical time to fix long-standing issues and resupply the ship of pretty much everything you can think of, from jet fuel to food. So it’s no surprise that the Lincoln would be swarmed with support personnel and supplies while much of her crew enjoys being on land once again for a few days.

It’s unclear how long the clean-up work on the Lincoln will last or how much of it will be finished by the time the ship and crew leave port. Either way, from what we have seen so far, it will look much better leaving Thailand than when it arrived.

Contact the author: howard@twz.com

The post USS Abraham Lincoln Is Getting A Badly Needed Scrubbing While In Thailand appeared first on TWZ.

The U.S. Navy’s supercarrier USS Abraham Lincoln is now in Thailand for a much-deserved and highly publicized liberty port call. The carrier had gone 286 days without making such a stop, with much of that time spent executing grueling combat operations against Iran. The ship has been run very hard, relying on at times a rickety conveyor of sea replenishments to continue operating for months on end, and it has the scars to show for it. The Lincoln looks very much worse for wear, with so-called “running rust” and algae caked all along the sides of the hull, as well as around the edges of the flight deck and sponsons on either side. It’s something of a startling appearance for one of the most powerful ships on the planet and a major symbol of U.S. power projection, but it is also a reminder of what the vessel and its crew have endured for months on end.

The Lincoln arrived in the Thai port of Laem Chabang earlier today. The carrier did make a stop in Guam in December 2025 and reportedly made another one somewhere in the Middle East in July. However, in both cases, these have been characterized as brief logistical stopovers that did not offer any real opportunity for personnel onboard to disembark. Thai media reports say the carrier is expected to remain in Laem Chabang through the end of the weekend.

“Our arrival in Laem Chabang provides a well-deserved opportunity for our Sailors and Marines to rest and recharge. It also underscores the strong and enduring partnership and alliance between the United States and Thailand,” Rear Adm. Robert E. Loughran, commander of Carrier Strike Group 3 (CSG-3), said in a statement in a press release today. “What this strike group has accomplished is truly historic. I could not be prouder of the exceptional professionalism and expertise demonstrated by every member of this team during our operations in the U.S. Central Command area of responsibility.”

Lincoln and its strike group had left port in San Diego in November 2025 for what was originally expected to be a routine cruise in the Pacific. The carrier, its air wing, and escorts were subsequently directed to the Middle East and arrived in that region in January 2026.

CSG-3 took part in the opening salvo of strikes on Iran on February 28 as part of what the U.S. military dubbed Operation Epic Fury. Lincoln and the rest of the strike group continued to support Epic Fury and subsequent operations against Iran for months thereafter. The decision was finally made to rotate the carrier out of the region last month following a raft of reports of severely flagging morale and mental health among the crew, which we will come back to later.

Two of the Arleigh Burke class destroyers assigned to CSG-3, the USS Michael Murphy and the USS Spruance, are still understood to be operating in the Western end of the Indian Ocean. A third destroyer in the strike group, the USS Frank E. Petersen Jr., accompanied the Lincoln to Thailand and is now docked in a separate port in Sriracha, near Laem Chabang. The Ticonderoga class cruiser USS Robert Smalls also helped escort the carrier, and that warship “also arrived in Map Ta Phut, Thailand for their own scheduled port visit,” according to the Navy.

As mentioned, Lincoln definitely looks like it’s been at sea more or less continuously for the last nine and a half months or so. Pictures and videos of the ship in Laem Chabang seen throughout this story plainly show big dark rust stains all around the hull and other similar signs of wear elsewhere. There is also a bright green ring of algae layered on the hull at the waterline. While carriers have very large crews and usually keep the ship’s appearance up relatively well while on cruise, there is only so much that can be done out of port on particularly long deployments, where all resources are focused on sustained high-tempo combat operations.

Running rust on U.S. Navy ships has been something of a lightning rod for criticism in recent years, including from President Donald Trump. This is in part due to the negative optics of such visible wear and tear on American naval vessels, especially during calls in foreign ports.

“It’s terrible. I think they should be ashamed,” John Phelan told members of Congress at a hearing last year after being shown pictures of a very worn-looking Arleigh Burke class destroyer, the USS Dewey, during a stopover in Singapore. “Would you want to go on that ship?”

Phelan was testifying at the time regarding his nomination to be Secretary of the Navy. At the time, he said that President Trump had already been texting him in the middle of the night regarding the issue. Phelan was subsequently confirmed and served as the Navy’s top civilian until he was unexpectedly fired in April, reportedly over disagreements regarding the new Trump class battleships and other more general friction within the administration,

Lincoln‘s current condition is, of course, an extreme case that is the result of very specific operational circumstances. The carrier has already been in the news for weeks now due to the aforementioned morale issues, which family members of those onboard have been very vocally calling attention to through the media. One sailor had to be rescued last month after deliberately jumping overboard. There were reports that at least one other individual onboard had attempted to do the same. President Donald Trump and Secretary Pete Hegseth, among others, have pushed back on concerns about mental health and other issues on the ship. In a statement shared on social media on August 16, Navy Adm. Brad Cooper, head of U.S. Central Command (CENTCOM), acknowledged, but still downplayed, the seriousness of the mental health situation, in particular.

At the same time, the carrier’s marathon deployment is indicative of larger shipbuilding, readiness, and other issues that the Navy continues to struggle with. Strains on the service carrier fleets in particular have been steadily building for years and are now becoming a low-level crisis. The USS Gerald R. Ford wrapped up a historic 326-day-long deployment in May. The Navy has publicly said that the USS Theodore Roosevelt, which is set to begin its latest cruise soon, could be away from home for at least eight months. The longer the ships remain deployed, the longer they typically have to spend in port afterward, further compounding the situation with each passing day during months-long extensions. This all has very worrisome cascading impacts on even routine maintenance cycles, let alone deep overhauls and upgrade efforts, as well as personnel management matters, as we have explored in detail in the past.

“It’s my earnest attempt to really try to keep those [deployments] at seven months,” Chief of Naval Operations Adm. Daryl Caudle, the Navy’s top officer, said during a question-and-answer session at Fort Meade, Maryland, Monday, which was livestreamed. He also said he wanted a Navy “that can sustain a seven-month deployment and still give our combatant commanders the amount of naval force they need to accomplish their missions, solve their key operational problems, and make sure they have all the naval force necessary to do what they need to do.”

Caudle had notably acknowledged concerns about strains on the Ford while speaking to TWZ and other outlets at the Surface Navy Association’s annual symposium back in January.

The Lincoln‘s visibly worn state certainly draws new attention to the stress on America’s carrier fleets as personnel onboard are now finally getting a much-earned reprieve in Laem Chabang.

Contact the author: joe@twz.com

The post USS Abraham Lincoln Looks Like It’s Been Through Hell After 286 Days At Sea appeared first on TWZ.

Chinese state-run shipping company COSCO has been using concealed systems on its vessels to gather signals intelligence around North American, European, and Asian coastlines for decades, it has been alleged. Similar claims have been made in the past, and overlap between nominally civilian enterprises in China and the country’s military and intelligence services is well established at this point.

Reuters first reported on the use of COSCO ships as discrete signals intelligence platforms earlier today, citing two unnamed officials within President Donald Trump’s administration.

“The officials, who spoke on condition of anonymity to discuss the U.S. assessment of the Chinese program, said COSCO has a decades-long intelligence-collection partnership with Beijing,” according to the report. “The arrangement allows China to collect communication signals from vessels ​and aircraft operating across Europe, North America and Asia, they said.”

It is worth noting here that China’s National Intelligence Law, enacted in 2017, includes a specific provision that requires all organizations and citizens within the country to support state intelligence work as required. It also obligates the state to protect entities that do so.

“The advanced equipment aboard the ships is intended to enable China ​to gather information about ‘military communications technologies and encryption developments,’ one of the officials said,” Reuters‘ story today added. “The officials did not detail the type of equipment COSCO ships were allegedly using, but said they were ‘sophisticated signals intelligence collection’ platforms, not routine communications hardware.”

Officials at the Chinese Embassy in Washington, D.C., unsurprisingly denied these assertions, according to that outlet.

Purpose-built signals intelligence suites can range widely in size and shape, as can their capabilities. They can be very small and basic or far more elaborate systems. Even the latter could be concealed as modern commercial ships, which already feature lots of antennas.

What might happen to intelligence collected by the ships is unknown. At the very least, systems onboard could record the data, which could then be batched out when safe to do so, either physically or via transmission. Basic passive signals suites can also run autonomously, or even be controlled from anywhere in the world if the ship is connected via satellite communications (SATCOM). High-bandwidth SATCOM is very common now on ships around the globe.

Personnel on the ship could also operate the systems, and even process receptions of interest. It might be possible to fit the ships with suitable datalinks to then transmit the collected data in near-real-time to other nodes, including ones back in China, for further analysis and exploitation.

Reuters‘ sources said scooping up data on “military communications technologies and encryption developments” was a priority for the commercial vessels turned spy ships. Signals intelligence can take many other forms, from emissions from radars to communications chatter. Depending on what is collected and how, specialists can use that information to glean details about how systems function, as well as insights into standard operating procedures and other details. This is especially true when multiple forms of intelligence are fused together. Generally speaking, signals intelligence is routinely used to help build out so-called ‘electronic orders of battle’ detailing the disposition and capabilities of an opponent’s forces, especially air defense and command and control networks.

As mentioned, this is not the first time claims in this general vein have emerged, either. At least some evidence has been presented in the past, through open-source analysis. Reuters‘ sources directed that outlet to a report published last year by the China Maritime Studies Institute at the U.S. Naval War College exploring exactly this topic in relation to China’s quasi-military maritime militia. The maritime militia is made up of ostensibly civilian fishing fleets, but has direct ties to the People’s Liberation Army (PLA) and the Chinese Coast Guard. It is routinely used to harass and intimidate foreign vessels in disputed waters, especially in the South China Sea.

“Undergirding these operations is a cadre of maritime militia intelligence specialists called ‘information personnel.’ Information personnel are organized into force contingents that support operational militia forces,” according to that report. “Most have day jobs in the fishing industry, but many hale [sic; hail] from other sectors, including marine shipping and even maritime law enforcement units.”

“It is more likely than not that PRC [People’s Republic of China] vessels operating overseas have already begun embarking information personnel to serve intelligence collection and reporting functions. In the case of China’s fishing fleet, serving this foreign intelligence collection function could be as simple as adding a new duty to the ‘information personnel’ that already embark aboard some distant-water fishing vessels,” that report added. “Aside from their primary responsibilities of tallying and reporting production numbers, serving as experts on international and national fisheries regulations that affect their work, and handling interactions with foreign officials while at sea and in port, they might also be tasked with collecting and reporting military and political intelligence while operating overseas.”

“Similar processes may already be in place in the commercial shipping industry,” it continued. “For instance, Guangxi province’s Beihai city has built up its ranks of maritime intelligence specialists by recruiting from among marine shipping personnel.”

No explicit mention is made in the report about signals intelligence gathering.

In the past year or so, there have been multiple reports that Russia is also using its so-called ‘shadow fleet’ of oil tanker ships in a secondary role as intelligence-gathering platforms. The primary job of those vessels is to help the Kremlin evade sanctions.

There is other tangential evidence that also lends credence to today’s report from Reuters. As mentioned, in the midst of still mysterious drone swarms that harassed U.S. Navy ships off the coast of southern California back in 2019, U.S. authorities at least explored the possibility that a Hong Kong-flagged bulk carrier, the M/V Bass Strait, might have been a launch point. It remains unknown, at least publicly, whether the Bass Strait or another nearby ship might have been the source of the harassment, or if it came from somewhere else, potentially further away. TWZ was the first to report on this detail as part of a deeper investigation into these incidents, which came amid a spike in news about claimed sightings of what are now commonly referred to as unidentified aerial phenomena (UAP). We have been saying for years now that, while some UAP sightings do remain unexplained, many more are likely to have been drones (as well as balloons), which foreign governments could be using for intelligence gathering and other malign purposes.

It’s also worth noting here that intelligence collection from international waters and airspace is a practice that nation state armed forces and intelligence agencies globally, including those in the United States, engage in regularly with varying degrees of openness. Leveraging nominally civilian ships, as well as aircraft, for these purposes is hardly new.

Despite the official denials to the Reuters piece today, it would be hard to imagine Chinese authorities not making use of commercial ships for this purpose, if possible, given that major deepwater ports worldwide are often dual-purpose civilian/military facilities. Radar sites and other critical facilities are often positioned along or near coastlines. Cargo ships and tankers often pass by major exercises and under major military operating airspace, where they could scoop up critical data.

With commercial ships already plying their routes, this would also just offer the Chinese government ways to readily bolster maritime intelligence-gathering capacity at low cost and low risk. China’s commercial fleets dwarf any other on Earth, making their presence commonplace and providing many opportunities to hide these operations.

A 2021 report published through the U.S. National Geospatial-Intelligence Agency’s (NGA) Tearline Project also highlighted the possibility of Chinese-owned facilities at ports around the world being used for intelligence gathering or even for launching non-kinetic attacks, including electronic warfare jamming. It specifically noted how COSCO’s facility in Belgium’s Port of Zeebrugge is “in close proximity to a Belgian Naval Base and thus could fulfill additional militarized requirements.”

Concerns about land owned by Chinese companies and nationals being used to collect intelligence or for other purposes have become an increasingly hot topic of discussion in the United States in recent years.

Reuters‘ piece does not say what, if any, steps U.S. authorities have taken or may be planning to take now to monitor for or take more active countermeasures against Chinese-flagged ships being used for intelligence gathering, despite this being said to be a decades-old practice. The report does note that “the Pentagon put COSCO on its list of companies linked to China’s military in January 2025, a designation that carries serious reputational costs for companies ​as well as U.S. government procurement ​bans, but does not entail ⁠formal sanctions.”

Though no hard evidence has yet been provided, Chinese authorities using cargo ships as additional discreet signals intelligence-gathering assets is very plausible, and would certainly seem to be an issue that should be taken seriously, if it is not already being addressed.

Contact the author: joe@twz.com

The post Chinese Cargo Ships Clandestinely Gather Signals Intelligence: Report appeared first on TWZ.