Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Meta has restricted how its engineers use Anthropic's Claude Code and OpenAI's Codex, fearing it could accidentally distil a rival's model into its own.

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private ...