A security vulnerability exists in six major coding agents: via a repository with malicious code, attackers can trick the AI ...
WordPress 6.9.5 and 7.0.2 patch wp2shell, a pre-auth core RCE that lets anonymous attackers run code on default installs, ...
AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...
Claude Code runs great on defaults, right up until it doesn't ...
A decades-old Unix symlink trick fools six AI coding assistants, including Claude Code, into writing SSH keys and shell ...
A “systematic vulnerability pattern” in at least six of the most widely used AI coding assistants can be abused to trick ...
Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.
Six major AI coding assistants have been found to share a flaw that turns their approval prompts into a rubber stamp, letting ...
Switch to OpenCode instead of Claude Code to bypass vendor lock-in and cut API costs by utilizing hundreds of free or local ...
A one-line entry in the Claude Code v2.1.200 changelog, released July 3, 2026, changed something fundamental about how the tool behaves the moment a developer installs or updates it. Anthropic changed ...
Goodhart's Law ("When a measure becomes a target, it ceases to be a good measure.") has been around long enough that it should not keep catching enterprise AI programs off guard, but here we are. The ...