… Adversa, a security firm based in Tel Aviv, Israel, spotted the issue following the leak of Claude Code's source. Claude Code implements various mechanisms for allowing and denying access to specific tools. …
… But it has alienated the current US administration and its effort to maintain model safety risks pushing away the security community and developers who do security work. …
… The blog also includes a list of indicators of compromise, including the GitHub repositories with the trojanized Claude Code leak and malware hashes to help defenders in their threat-hunting efforts, so be sure to check that out - and, as always, be careful what you download. ® zscaler security cyb…
… Not just AI security bug slop, but automated, dedicated AI security bug slop! While Anthropic claims its Claude Opus 4.6 can barely find zero-days, Mythos Preview can pop up working exploits 72.4 percent of the time. …
… But Hanff claims he never installed any Anthropic browser extensions due to privacy and security concerns. Claude Desktop did so for him, without disclosure or permission. Browser extensions magnify security and privacy challenges because they often request overly broad permissions. …
… Claude Code's overrepresentation appears to follow from its recent surge in popularity. In the past 90 days, Claude Code has added more than 30.7 billion lines of code to public repositories, according to Claude's Code, an analytics website created by software engineer Jodan Alberts. …
… Some attacks succeeded Ex-NSA cyber-boss: AI will soon be a great exploit coder OpenAI tries to build its coding cred, acquires Python toolmaker Astral Infosec community panics as Anthropic rolls out Claude code security checker Joyce quoted security researcher Sean Heelan, who analyzed OpenAI's th… …
… But security researchers say that's not enough. The AI biz describes the research preview capability, dubbed Claude Code Security , as a way for security teams to find and fix flaws they might otherwise have missed. "This is a pivotal time for cybersecurity," the company said . …
Security Claude Opus wrote a Chrome exploit for $2,283 Pause your Mythos panic because mainstream models anyone can use already pick holes in popular software Anthropic withheld its Mythos bug-finding model from public release due to concerns that it would enable attackers to find and exploit vulne… …
… The company's Claude models are already capable of conducting code reviews upon demand – you can learn a lot about the quality of AI-generated code by having Claude review its own work. …