Cybersecurity articles tagged #Claude Code on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/ai-coding-agents-vulnerable-to-friendly-fire-command-executionhttps://runtimerebel.com/blog/ai-coding-agents-vulnerable-to-friendly-fire-command-executionAI coding agents like Anthropic's Claude Code and OpenAI's Codex are susceptible to Friendly Fire attacks, leading to unintended local code execution.Thu, 09 Jul 2026 07:39:01 GMTAI SecurityFriendly FireClaude CodeOpenAI CodexRCEhttps://runtimerebel.com/blog/ai-coding-agents-mimic-malicious-activity-in-endpoint-detectionshttps://runtimerebel.com/blog/ai-coding-agents-mimic-malicious-activity-in-endpoint-detectionsAI coding agents like Claude Code and OpenAI Codex are triggering endpoint security alerts by performing actions similar to human attackers, demanding rule adjustments.Wed, 08 Jul 2026 17:38:20 GMTAIEndpoint SecuritySophosClaude CodeOpenAI CodexCursorBehavioral Detectionshttps://runtimerebel.com/blog/claude-code-indirect-prompt-injection-hijacking-developer-machineshttps://runtimerebel.com/blog/claude-code-indirect-prompt-injection-hijacking-developer-machinesResearchers demonstrate a new attack method leveraging indirect prompt injection in Claude Code, enabling the hijack of developer machines via malicious code in…Mon, 29 Jun 2026 17:07:49 GMTClaude CodePrompt InjectionSupply Chain AttackDeveloper SecurityAI SecurityReverse ShellMachine Hijackhttps://runtimerebel.com/blog/anthropic-claude-code-github-action-flaw-enables-repo-hijackinghttps://runtimerebel.com/blog/anthropic-claude-code-github-action-flaw-enables-repo-hijackingA critical flaw in Anthropic's Claude Code GitHub Action allowed attackers to hijack public repositories using malicious issues, posing supply chain risks.Thu, 04 Jun 2026 17:08:52 GMTAnthropicClaude CodeGitHub ActionsCI CD SecurityRyotaKhttps://runtimerebel.com/blog/anthropic-claude-code-integration-of-mythos-model-raises-security-riskshttps://runtimerebel.com/blog/anthropic-claude-code-integration-of-mythos-model-raises-security-risksAnthropic may be integrating its restricted Mythos model into Claude Code, raising concerns about autonomous agentic capabilities and AI safety levels.Mon, 25 May 2026 20:35:06 GMTAnthropicClaude CodeMythosAI SecurityAutonomous Agentshttps://runtimerebel.com/blog/claude-code-sandbox-bypass-anthropic-patches-cli-vulnerabilityhttps://runtimerebel.com/blog/claude-code-sandbox-bypass-anthropic-patches-cli-vulnerabilityAnthropic recently addressed a sandbox bypass in Claude Code. This vulnerability could have allowed data exfiltration when combined with prompt injection.Wed, 20 May 2026 13:04:49 GMTAnthropicClaude CodeSandbox BypassAI SecurityPrompt Injectionhttps://runtimerebel.com/blog/ai-cli-tools-vulnerable-to-rce-via-malicious-repositorieshttps://runtimerebel.com/blog/ai-cli-tools-vulnerable-to-rce-via-malicious-repositoriesTrustFall research reveals RCE risks in Claude Code and Cursor CLI. AI agents can be manipulated via malicious repositories to execute arbitrary commands.Thu, 07 May 2026 16:44:00 GMTTrustfallClaude CodeRCEAI SecurityCursor CliGemini CLIhttps://runtimerebel.com/blog/claude-code-and-gemini-cli-prompt-injection-via-code-commentshttps://runtimerebel.com/blog/claude-code-and-gemini-cli-prompt-injection-via-code-commentsResearch reveals how Claude Code, Gemini CLI, and GitHub Copilot agents are vulnerable to prompt injection attacks via malicious source code comments.Thu, 16 Apr 2026 08:41:38 GMTClaude CodeGemini CLIGitHub CopilotPrompt InjectionAI Securityhttps://runtimerebel.com/blog/anthropic-claude-code-vulnerability-analysis-mitigation-guidehttps://runtimerebel.com/blog/anthropic-claude-code-vulnerability-analysis-mitigation-guideAnthropic's Claude Code faces critical scrutiny following a source code leak and the discovery of a vulnerability allowing arbitrary command execution.Fri, 03 Apr 2026 04:51:11 GMTAnthropicClaude CodeAI SecurityRCEAdversa AIhttps://runtimerebel.com/blog/fake-github-repositories-deliver-vidar-infostealer-via-claude-leakhttps://runtimerebel.com/blog/fake-github-repositories-deliver-vidar-infostealer-via-claude-leakThreat actors are exploiting the Claude Code leak, deploying fake GitHub repositories to distribute Vidar infostealer malware, targeting unsuspecting developers and…Fri, 03 Apr 2026 00:39:40 GMTClaude CodeGitHubVidar InfostealerMalwareSupply Chain Attackhttps://runtimerebel.com/blog/claude-code-source-leaked-via-npm-packaging-errorhttps://runtimerebel.com/blog/claude-code-source-leaked-via-npm-packaging-errorAnthropic confirms internal Claude Code source code was leaked due to an npm packaging error. Analysis of supply chain risks and mitigation strategies.Wed, 01 Apr 2026 08:37:04 GMTAnthropicNpm RegistryData LeakSupply Chain SecurityClaude Codehttps://runtimerebel.com/blog/anthropic-claude-code-source-code-leaked-via-npm-registryhttps://runtimerebel.com/blog/anthropic-claude-code-source-code-leaked-via-npm-registryAnthropic accidentally exposed proprietary source code for its Claude Code CLI tool on the public npm registry. Analyze the technical impact and risks.Wed, 01 Apr 2026 00:43:28 GMTAnthropicClaude CodeNPMSource Code LeakDevSecOpshttps://runtimerebel.com/blog/securing-claude-code-managing-ai-agent-risk-with-ceros-visibilityhttps://runtimerebel.com/blog/securing-claude-code-managing-ai-agent-risk-with-ceros-visibilityDiscover how Claude Code creates new security challenges for engineering teams and how Ceros provides the visibility needed to govern autonomous AI agents.Thu, 19 Mar 2026 12:18:21 GMTAnthropicClaude CodeAI SecurityCerosGovernancehttps://runtimerebel.com/blog/claude-code-weaponized-in-mexican-government-cyberattackhttps://runtimerebel.com/blog/claude-code-weaponized-in-mexican-government-cyberattackAnalysis of how threat actors leveraged Anthropic’s Claude Code to automate exploitation and exfiltrate 150GB of data from Mexico's infrastructure ministry.Sun, 01 Mar 2026 16:09:27 GMTClaude CodeAnthropicMexicoData BreachAI AgentsSICThttps://runtimerebel.com/blog/claude-code-security-analysis-assessing-ai-cli-assistant-riskshttps://runtimerebel.com/blog/claude-code-security-analysis-assessing-ai-cli-assistant-risksTechnical analysis of Anthropic's Claude Code CLI tool, evaluating its impact on application security and potential for introducing code vulnerabilities.Fri, 27 Feb 2026 16:17:21 GMTAnthropicClaude CodeAI SecurityDevSecOpsSecure Codinghttps://runtimerebel.com/blog/anthropic-patches-claude-code-vulnerabilities-enabling-silent-hackinghttps://runtimerebel.com/blog/anthropic-patches-claude-code-vulnerabilities-enabling-silent-hackingAnthropic addressed flaws in Claude Code that allowed attackers to execute arbitrary commands on developer devices via malicious repository configurations.Thu, 26 Feb 2026 16:27:39 GMTAnthropicClaude CodeRCEPrompt InjectionDeveloper SecurityCheck Point Researchhttps://runtimerebel.com/blog/claude-code-flaws-enable-rce-api-key-exfiltrationhttps://runtimerebel.com/blog/claude-code-flaws-enable-rce-api-key-exfiltrationMultiple security flaws in Anthropic's Claude Code AI coding assistant allow remote code execution and API credential theft via configuration mechanisms.Wed, 25 Feb 2026 20:15:32 GMTClaude CodeAnthropicAIRemote Code ExecutionAPI Key ExfiltrationVulnerabilityDevelopment Tools