Tag: Anthropic Claude Code
FakeGit Targets AI Coding Agents with Malicious GitHub Repos
Jeff Burt | | AgentBaiting, AI coding agents, AI supply chain risk, Anthropic Claude Code, fake repositories, FakeGit, github, Google Gemini, Island, MCP Server, OpenAI ChatGPT, SmartLoader, StealCThreat actors continue to find new ways to incorporate AI into schemes aimed at luring developers into downloading malware from fake repositories. The latest example involves almost 7,600 malicious GitHub repositories that ...
GhostApproval Flaw Featuring Decades-Old Feature Found in Six AI Coding Tools
Jeff Burt | | Adversa AI, AI coding agents, AI security risks, Amazon Q Developer, Anthropic Claude Code, Augment, CodeSignal, Cursor, GhostApproval, Google Antigravity, human in the loop coding, OpenAI Codex, SSH keys, symlinks, Unix, Windsurf, WizA security flaw found in six popular AI coding agents can let attackers abuse a decades-old feature in Unix to trick an AI agent into giving them control of a developer’s system ...
Mozilla Shows the Danger of Indirect Prompt Injections in AI Coding Agents
Jeff Burt | | AI coding agents, AI security risks, Anthropic Claude Code, Developer Security, exposed credentials, exposed secrets, Futurum Group, indirect prompt injection, leaked API keys, Mozilla 0DIN, shell scriptsA clean GitHub repository that contains no malicious code can launch an attack and fully compromise a developer’s systems by using indirect prompt injections to trick AI-powered coding agents like Anthropic’s Claude ...
Security Flaw in Claude Code Illustrates the Risk of AI in Developer Workflows
Jeff Burt | | agentic AI in development, Anthropic Claude Code, bash, CI/CD and AI agents, exposed secrets, GitHub Actions, microsoft, prompt injectionAI coding agents are reshaping software development—but they’re also expanding the attack surface. Researchers uncovered a now-patched vulnerability in Anthropic’s Claude Code GitHub Action that could have enabled prompt injection attacks to ...
Attackers Can Exploit a Claude Code RCE Flaw to Take Command of System
Jeff Burt | | agentic AI, AI (Artificial Intelligence), AI security risks, Anthropic Claude Code, automated parsers, deeplinkA dangerous vulnerability found in Anthropic’s popular Claude Code developer model could have allowed bad actors to grab control of a victim’s system by luring them into clicking on a crafted malicious ...
xAI Enters the Coding Agent Race With Grok Build
Tom Smith | | AI developer workflow, Anthropic Claude Code, Arena Mode, coding agent, devops tools, grok-code-fast-1, local-first code, multi-agent architecture, xAI Grok BuildElon Musk's xAI has entered the developer workspace with Grok Build, a local-first coding agent featuring an automated "Arena Mode" that runs and ranks parallel AI outputs to rival Anthropic and OpenAI ...
LayerX: Anthropic’s Claude Code Can Easily Be Easily Weaponized
Jeff Burt | | agentic AI guardrails, AI Developers, AI IDE, AI security, Anthropic Claude Code, Anthropic Mythos Preview, LayerX, Project GlasswingLayerX researchers were able to convince the popular AI coding tool to bypass its guardrails and execute malicious instructions ...
Security Flaws in Anthropic’s Claude Code Risk Stolen Data, System Takeover
Jeff Burt | | AI API Security, AI coding risks, AI coding tools, AI developer tools, Anthropic Claude Code, Check Point, MCP protocol, Palo Alto Unit 42Three critical vulnerabilities found in Anthropic’s Claude Code agentic AI developer tool could be exploited simply by cloning and opening an untrusted project and lead to system takeover, stolen API keys, and ...
