CVE-2025-59536: Claude Code MCP Config Command Execution
A vulnerability in Claude Code allowed project-level MCP configuration to lead to command execution.
Tag: Claude Code
Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
Cybersecurity researchers at Tenet Security have identified a new class of attack called Agentjacking, which tricks AI coding agents into executing arbitrary…
Malicious npm Packages Disguised as PostCSS Tools Deploy Windows RAT
Cybersecurity researchers at JFrog have uncovered a set of malicious npm packages that masquerade as legitimate PostCSS tools to deliver a Windows-based…
Claude Code Resists GhostSplice in Tests
GPT-5.4 dropped to 0% compliance behind Claude Code, suggesting that Claude Code's safety controls may mitigate the GhostSplice attack.