Claude Code

Attackers impersonate popular AI brands to spread malware

AI, ChatGPT, Claude Code, cybercrime, News, Sophos /

Attackers impersonate popular AI brands to spread malware 2026-08-21 at 14:47 By Sinisa Markovic Attackers are impersonating popular AI brands like Perplexity, Claude, ChatGPT, and Copilot to spread information stealers, backdoors, malicious browser extensions, and other malware, according to Sophos. Overview of MDR cases with AI involvement (Source: Sophos) Sophos X-Ops reviewed 12 months of […]

Attackers impersonate popular AI brands to spread malware Read More »

PentestGPT: Open-source automated penetration testing agentic framework

agentic AI, Claude Code, cybersecurity, Don't miss, GitHub, LLMs, News, open source, penetration testing /

PentestGPT: Open-source automated penetration testing agentic framework 2026-08-12 at 08:30 By Anamarija Pogorelec PentestGPT is an open-source penetration testing agent that points a large language model at a target and lets it work. In its default mode it runs recon, then exploit, then walkthrough, each stage feeding the next. Switch it to pentest mode and

PentestGPT: Open-source automated penetration testing agentic framework Read More »

Anthropic to put AI in charge of reviewing Claude Code actions by default

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News /

Anthropic to put AI in charge of reviewing Claude Code actions by default 2026-08-10 at 12:13 By Anamarija Pogorelec Anthropic will make auto mode in Claude Code the default for new sessions on Pro, Max, and Team plans starting August 14. Users who previously selected a different default may receive a one-time prompt asking whether

Anthropic to put AI in charge of reviewing Claude Code actions by default Read More »

Anthropic’s Claude breached three companies during security tests

agentic AI, AI, Anthropic, Claude Code, cybersecurity, LLMs, News /

Anthropic’s Claude breached three companies during security tests 2026-07-31 at 12:41 By Sinisa Markovic Anthropic has disclosed that its AI model Claude gained unauthorized access to the systems of three different organizations during cybersecurity evaluations. The disclosure follows OpenAI’s July 21 announcement that some of its models had escaped an isolated testing environment by exploiting

Anthropic’s Claude breached three companies during security tests Read More »

Claude can now sign into websites with 1Password without exposing your credentials

1Password, Anthropic, authentication, Claude Code, credentials, cybersecurity, News, Privacy /

Claude can now sign into websites with 1Password without exposing your credentials 2026-07-17 at 12:17 By Anamarija Pogorelec 1Password has introduced 1Password for Claude, a beta integration that lets Anthropic’s AI assistant complete browser tasks requiring authentication without accessing users’ passwords or other secrets. The integration is available to paid Claude subscribers (Pro, Max, Team,

Claude can now sign into websites with 1Password without exposing your credentials Read More »

Claude Code users keep 50% higher limits until July 19

Anthropic, Claude Code, News /

Claude Code users keep 50% higher limits until July 19 2026-07-13 at 12:06 By Anamarija Pogorelec Anthropic has extended a limited-time promotion that increases weekly usage limits in Claude Code by 50% through July 19, 2026, at 11:59 PM PT. When the promotion ends, weekly usage limits will return to their standard levels without any

Claude Code users keep 50% higher limits until July 19 Read More »

AWS centralizes access, spending, and governance for Claude

Anthropic, AWS, Claude Code, gateway, News /

AWS centralizes access, spending, and governance for Claude 2026-07-09 at 11:37 By Anamarija Pogorelec Claude apps gateway for AWS is a self-hosted control plane that gives organizations a single point of control over access, costs, and policies for Claude Code and Claude Desktop. It replaces per-developer cloud credentials, manual distribution of managed settings to developer

AWS centralizes access, spending, and governance for Claude Read More »

Claude Sonnet 5 includes safeguards against dangerous cyber use

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News /

Claude Sonnet 5 includes safeguards against dangerous cyber use 2026-07-01 at 11:45 By Anamarija Pogorelec Anthropic has introduced Claude Sonnet 5, the latest version of its general-purpose AI model, with improved reasoning, coding, tool use, and knowledge work capabilities. The model can make plans, use tools such as browsers and terminals, and complete tasks autonomously.

Claude Sonnet 5 includes safeguards against dangerous cyber use Read More »

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

AI, Artificial Intelligence, Claude Code, prompt injection, Repository /

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines 2026-06-29 at 17:28 By Ionut Arghire Indirect prompts hidden in a repository can lead to Claude Code spawning a reverse shell on the developer’s machine. The post Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines appeared first

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines Read More »

Best practices for AI in open-source work

Claude Code, generative AI, LLMs, News, open source, tips /

Best practices for AI in open-source work 2026-06-25 at 08:00 By Anamarija Pogorelec Free and open source software developers us AI coding assistants such as Claude Code, Copilot CLI, Antigravity, and OpenCode in their daily work. The Software Freedom Conservancy responded to that trend with a set of recommendations for contributors who use these tools,

Best practices for AI in open-source work Read More »

Low-skilled attacker used Claude, Codex to breach 14 companies

agentic AI, attack, attack tools, Claude Code, cybersecurity, Don't miss, Hot stuff, LLMs, News, research /

Low-skilled attacker used Claude, Codex to breach 14 companies 2026-06-17 at 18:43 By Zeljka Zorz Researchers have long warned that AI agents could lower the skill floor for offensive cyber operations, and a recent report by OALABS (Open Analysis) researchers bears that out. After recovering and analyzing over 1,000 agent sessions from a compromised server

Low-skilled attacker used Claude, Codex to breach 14 companies Read More »

Open-source CI/CD abuse detector guards against stolen credential attacks

automation, Claude Code, Don't miss, GitHub, LLMs, News, open source /

Open-source CI/CD abuse detector guards against stolen credential attacks 2026-06-15 at 08:30 By Sinisa Markovic CI/CD Abuse Detector is an open-source project that uses a large language model to flag suspicious changes to continuous integration and continuous deployment pipelines, workflows, and automation configurations. The repository contains drop-in templates for GitHub Actions, GitLab CI, and Azure

Open-source CI/CD abuse detector guards against stolen credential attacks Read More »

Claude now reviews and fixes vulnerabilities as you write code

Anthropic, Claude Code, cybersecurity, News, software development, vulnerability management /

Claude now reviews and fixes vulnerabilities as you write code 2026-05-27 at 16:37 By Sinisa Markovic Anthropic introduced a security-guidance plugin for Claude Code that reviews code changes for common vulnerabilities and helps Claude identify and fix issues during the same development session. The company says the plugin is designed to catch issues such as

Claude now reviews and fixes vulnerabilities as you write code Read More »

Anthropic Releases New Claude Sandbox, Security Guidance Plugin

AI, Anthropic, Artificial Intelligence, Claude, Claude Code /

Anthropic Releases New Claude Sandbox, Security Guidance Plugin 2026-05-27 at 09:56 By Eduard Kovacs The AI giant says the new plugin, which helps developers find vulnerabilities as they write code, has been used extensively internally. The post Anthropic Releases New Claude Sandbox, Security Guidance Plugin appeared first on SecurityWeek. This article is an excerpt from

Anthropic Releases New Claude Sandbox, Security Guidance Plugin Read More »

Anthropic adds 28 security and compliance integrations for Claude

AI, Anthropic, Claude Code, Compliance, cybersecurity, News /

Anthropic adds 28 security and compliance integrations for Claude 2026-05-25 at 21:27 By Sinisa Markovic AI tools are becoming part of everyday work in organizations, creating new security and oversight requirements as usage grows. To address that, Anthropic introduced 28 integrations with security and compliance tools that allow IT and security teams to manage Claude

Anthropic adds 28 security and compliance integrations for Claude Read More »

Anthropic Silently Patches Claude Code Sandbox Bypass

AI, Artificial Intelligence, Claude Code, sandbox, sandbox escape, vulnerability /

Anthropic Silently Patches Claude Code Sandbox Bypass 2026-05-20 at 16:04 By Eduard Kovacs The researcher who found it says the vulnerability could have been chained with a prompt injection to exfiltrate data. The post Anthropic Silently Patches Claude Code Sandbox Bypass appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Anthropic Silently Patches Claude Code Sandbox Bypass Read More »

Microsoft’s WinUI agent plugin trims token use by over 70% during development

Claude Code, GitHub, Microsoft, News, programming, software development, Windows /

Microsoft’s WinUI agent plugin trims token use by over 70% during development 2026-05-14 at 18:25 By Sinisa Markovic Microsoft published a plugin on May 13 that lets GitHub Copilot CLI and Claude Code drive the full WinUI 3 development cycle, from project scaffolding through signed MSIX packaging. The WinUI agent plugin ships one agent, eight

Microsoft’s WinUI agent plugin trims token use by over 70% during development Read More »

Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking

AI, Application Security, Claude Code, OAuth, Vulnerabilities /

Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking 2026-05-07 at 17:33 By Kevin Townsend Mitiga researchers say attackers can silently redirect Claude Code MCP traffic, intercept OAuth tokens, and maintain persistent access to connected SaaS platforms. The post Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking appeared first on

Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking Read More »

AI Coding Agents Could Fuel Next Supply Chain Crisis

Artificial Intelligence, Claude Code, Featured, supply chain, Supply Chain Security /

AI Coding Agents Could Fuel Next Supply Chain Crisis 2026-05-07 at 17:33 By Kevin Townsend “TrustFall” attack shows how AI coding agents can be manipulated into launching stealthy supply chain compromises. The post AI Coding Agents Could Fuel Next Supply Chain Crisis appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

AI Coding Agents Could Fuel Next Supply Chain Crisis Read More »

Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Prompt Injection via Comments

AI, AI hack, Artificial Intelligence, Claude Code, GitHub Copilot, prompt injection /

Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Prompt Injection via Comments 2026-04-16 at 12:11 By Eduard Kovacs A researcher has disclosed the details of the AI attack method he has named ‘Comment and Control’. The post Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Prompt Injection via Comments appeared first on SecurityWeek.

Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Prompt Injection via Comments Read More »

Scroll to Top