Claude didn't just plan an attack on Mexico's government. It executed one for a month — across four domains your security stack can't see.