Claude Code bypasses safety rule if given too many commands
… The associated note explains that there's a hard cap of 50 on security subcommands, set by the variable MAX SUBCOMMANDS FOR SECURITY CHECK = 50 . …
Search
Project Glasswing and open source: The good, bad, and ugly
… Not just AI security bug slop, but automated, dedicated AI security bug slop! …
Cheap Chinese models are overtaking Anthropic
… But it has alienated the current US administration and its effort to maintain model safety risks pushing away the security community and developers who do security work. …
Fake Claude Code source downloads actually delivered malware
Security They thought they were downloading Claude Code source. …
AI gets good at finding bugs, not as good at fixing them
… But security researchers say that's not enough. The AI biz describes the research preview capability, dubbed Claude Code Security , as a way for security teams to find and fix flaws they might otherwise have missed. "This is a pivotal time for cybersecurity," the company said . …
Using AI to code does not mean your code is more secure
… That's a different risk profile." ® devops development ai software security
Claude Desktop changes software permissions without consent
… But Hanff claims he never installed any Anthropic browser extensions due to privacy and security concerns. Claude Desktop did so for him, without disclosure or permission. Browser extensions magnify security and privacy challenges because they often request overly broad permissions. …
Claude attacks were 'Rorschach test' for infosec community
… Some attacks succeeded Ex-NSA cyber-boss: AI will soon be a great exploit coder OpenAI tries to build its coding cred, acquires Python toolmaker Astral Infosec community panics as Anthropic rolls out Claude code security checker Joyce quoted security researcher Sean Heelan, who analyzed OpenAI's th… …
Claude Opus wrote a Chrome exploit for $2,283
… His advice to developers is to focus more on security before code gets pushed and to pay closer attention to dependencies, so changes can be made quickly. He also argues that security patches should be done automatically, so people aren't left vulnerable because they forgot to accept an update. …
Anthropic debuts Code Review for teams, enterprises
… In organizations large enough to afford AI tools, it's doubtful that software developers will ever work alone again. ® software security devops development ai