Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Malicious Claude Code Cursor Extension: Detect and Remove the Persistent SSH Backdoor
Microsoft’s October 30, 2026 analysis of a malicious Claude Code–branded Cursor extension is a high-priority warning for development and sec...
Shadow AI Relay Services Strip Sandboxes from OpenAI Codex and Claude Code: Detection and Hardening Guide
Shadow AI Relays Are Shipping Codex and Claude Code With the Seatbelts Cut Security researchers have identified an enigmatic relay service p...
CyberXero AI-Augmented Campaign: Defending WordPress and E-Commerce from Claude Code-Orchestrated Intrusion
Security researchers have attributed a two-pronged initial access campaign — tracked as CyberXero — that fused commodity offensive tooling w...
Forensic Reconstruction of AI Coding Agents: Detection, Artifact Locations, and IR Playbook for Claude Code, Codex, Gemini CLI, and OpenCode
Introduction A quiet shift has occurred in enterprise endpoints over the last 18 months: developers and engineers are running autonomous and...
Anthropic's Free Claude Code Cloud Sessions: A Defender's Guide to Shadow AI Risk, Detection, and Governance
Introduction Anthropic has opened Claude Code cloud sessions to general users — no research preview signup required — and is sweetening the ...
Plugin4Shell Supply-Chain Flaw in Claude Code, Codex, and Copilot: Detection and Remediation Guide
Introduction Air Security disclosed a supply-chain vulnerability class this week that should be on every CISO's radar — especially organizat...
Self-Generated Prompt Injections in AI Compaction Summaries: Defending Claude Code and Coding Agents Against Persistence Attacks
A New Persistence Layer: When the AI Writes Its Own Malware Instructions Simon Willison's September 2026 write-up on self-generated prompt i...
Malicious .git Configs Hijack Claude Code, Codex, Cursor AI Agents — Detection and Hardening Guide
Introduction Manifold Security has disclosed a cluster of eight vulnerabilities spanning seven command-line AI coding agents — including Ant...
Securing Claude Code: Detection, Compliance API Monitoring, and Identity Governance for AI Coding Agents
Introduction AI coding assistants have crossed a line that security teams can no longer ignore. Claude Code is not a chatbot in a browser ta...