Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat

Summary

A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal developer credentials. The source says the exposed secrets include SSH private keys, AWS credentials, and Claude 0Auth tokens. The attack is described as zero-click.

Related items

• InfoBank of America hired 1,000 contractors to patch software flaws exposed by Anthropic's MythosSame vendor · CNBC Technology
• InfoThe AI race is back onSame vendor · The Verge (AI)
• InfoAnthropic’s self-replicating AI warning is alarming deja vuSame vendor · The Verge (AI)
• MediumHow Claude Code’s 256KB blind spot put developers’ secrets in the preview paneSame vendor · CSO Online
• InfoNvidia, worth $5.5tn, donates $250m to UK for AI safety researchSame vendor · The Guardian Technology