Related News
Nov 9, 2026
Claude Code's 'Don't Ask Again' Exposed 2,539 Secrets on GitHub
Security firm Apiiro found that Claude Code's "don't ask again" feature stores passwords, API keys, and SSH logins in plain text in a local settings file — and over 1,000 copies ended up in public GitHub repositories. Anthropic's Claude Code lead acknowledged the issue but existing fixes may not fully solve it.
Oct 12, 2026
GitHub Copilot local sandboxing is GA, but network access stays on by default
Copilot local sandboxing now covers CLI, the Copilot app and VS Code Agent Host sessions. It restricts tools through operating-system controls, while outbound internet, local-network access and credential proxies still need explicit review.
Jun 5, 2026
OpenAI Codex Chains Decade-Old DoS Attacks into New HTTP/2 Bomb Exploit
OpenAI Codex agent discovered a new denial-of-service attack by combining two decade-old techniques into an HTTP/2 Bomb that can crash vulnerable servers in seconds from a single home computer. Nearly 880,000 websites may be affected.