First Critical Vulnerability Found in Claude Code: Attackers Can Steal Developer Data
With every new technology, security is a paramount concern. While generative AI has shown susceptibility to trickery like 'Prompt Injection,' direct exploits were rare—until now. Researchers have discovered a critical vulnerability in Claude Code's source code that could allow attackers to steal data from developers.
Preceding modern generative AI, Generative Adversarial Networks (GANs) from 2014-2015 already presented algorithmic security risks.
Claude Code's First Vulnerability Discovered
Massive language models post-2017 and prompt-based generative AI (since 2022) have faced challenges such as data leaks and 'Prompt Injection.' However, a new category of vulnerability has emerged with Claude Code. Researchers from Adversa AI have identified a critical flaw in its permissions system.
The exploit is triggered when processing command chains exceeding 50 subcommands. Claude Code, aiming for performance optimization, bypasses individual checks and executes the entire sequence, opening the door for attackers to steal data.
Anthropic Fixed the Vulnerability in Claude Code Version 2.1.90
An attack scenario could involve a malicious 'Claude.md' file in a GitHub repository. Containing over 50 hidden commands, the AI agent would execute all of them without validation from the 51st onwards. This allows the use of commands like 'curl' or 'git' to exfiltrate sensitive data or cloud credentials from the developer's local environment to external servers, without their knowledge.
Fortunately, Anthropic has resolved this flaw in version 2.1.90 of Claude Code.
Fresh materials — Technology News
Intel Core Ultra 5 250K Plus iGPU Outperforms Steam Deck
Intel has been losing market share across all sectors since AMD launched its Zen processors nearly a decade ago. While APUs have become very popular in laptops, it must be said that Panther Lake has now become a worthy rival to AMD. In workstations, we have the Ryzen Threadrippers, and in serve
Intel Nova Lake-S: Dual Base Tile SKUs, Xe3P APU, and Dedicated Graphics Power
Intel's Nova Lake-S processors are once again surfacing in leaks, with new insights from prominent leakers clarifying the SKU lineup. A significant revelation is that several models previously thought to be Dual Base Tile (DBT) configurations will actually be Single Base Tile (SBT) variants. F
SuperDome: The Ultimate 15-Fan Noctua Cooler That Drops CPU Temps by 20°C
For PC enthusiasts concerned about high CPU temperatures during demanding tasks like gaming or heavy software usage, this is an interesting development. While many prioritize performance components like CPUs, GPUs, and RAM, other parts of a PC build often receive less attention. This can includ
Roblox Enhances Child Safety with New Account Tiers for Limited Chat and Game Access
Roblox has implemented a major safety upgrade, fundamentally altering its platform architecture for its younger user base, specifically those under 16. This comprehensive overhaul introduces age-specific game access and automated chat restrictions, aiming to create a safer online environment.
TCL's Next Gaming Monitor Might Reach an Astonishing 640Hz Refresh Rate
TCL CSOT is rumored to be developing a dual-mode gaming panel capable of an incredible 640Hz refresh rate. This represents a substantial advancement compared to the refresh rates offered by most current monitors. The technology employs a rare 4x refresh rate multiplier, potentially granting compet
AOC AGON Pro AGP346UCSD: Monitor QD-OLED WQHD de 34 pulgadas a 360 Hz
AOC ha presentado en China su nuevo monitor gaming de alta gama, el AGON Pro AGP346UCSD. Este dispositivo está diseñado para el mercado más exigente, incorporando un avanzado panel QD-OLED de quinta generación. Se informa que se trata de un panel QD-OLED Penta Tandem fabricado por Samsung