SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
Windows Report

Mozilla Warns Clean GitHub Repositories Can Trick Claude Code Into Running Malware

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub ...
The New York Times

The Learning Network

To participate, submit your response here by July 10 at 9 a.m. Eastern. This week’s winners will be announced by July 22. By The Learning Network Heeva Alavi, an Iranian-American, writes about her ...
GitHub

anmolksachan/AI-ML-Free-Resources-for-Security-and-Prompt-Injection

4.3 AI IDE & Coding Assistant Security AI coding assistants (Claude Code, GitHub Copilot, Cursor) have system-level access and are a high-value target. Rules File Backdoor — .cursor/rules and similar ...