Security researchers at Novee Security demonstrated critical vulnerabilities in the default configurations of coding agents from Anthropic and Google, enabling unauthorized code execution on their respective CI (Continuous Integration) runners.
Earlier reports mentioning Claude Code
Supabase has open-sourced Supabase Evals, a benchmark and framework designed to test and score AI agents on real-world Supabase development tasks. This initiative aims to evaluate the performance of AI coding assistants when building applications on the Supabase platform.
A critical security vulnerability, designated CVE-2026-59726 with a perfect CVSS score of 10.0, has been identified in Ruflo, an open-source agent meta-harness. This flaw permits unauthenticated attackers to achieve remote code execution and potentially poison the memory of artificial intelligence…
SEO teams often prioritize creating new content over updating existing pages, leading to a decline in rankings, clicks, and revenue for established content. A 14-step process has been developed to diagnose content decay, implement targeted updates, and measure the impact…
Fireworks AI has launched Fireworks Nexus, an AI management and routing platform engineered for organizations that utilize coding tools. This platform aims to connect existing developer tools with a managed layer of open-weight AI models, addressing the issue of routine…
Anthropic released the Claude Security plugin for Claude Code in beta this week, allowing users to perform multi-agent vulnerability scans of code repositories directly from within an existing Claude Code session.
Mistral Vibe for Code achieved the highest score of 22 out of 25 in a comparative benchmark evaluating four leading coding agents on a practical scaffold-to-pull request task. The evaluation, conducted as of July 14, 2026, assessed agents on feature…
Anthropic released Claude Sonnet 5 this week, positioning it as its most agentic Sonnet model to date. This new iteration is designed to plan, operate browsers and terminals, and execute tasks autonomously over extended periods.
AI coding agents designed to identify security vulnerabilities in open-source code can be manipulated into executing malicious code on a user's machine, a new proof-of-concept study revealed on Wednesday. This attack, dubbed "Friendly Fire" by its creators at the AI…
Researchers at Wiz discovered critical security flaws in six popular AI coding assistants that could allow malicious code repositories to execute commands on developer machines. The vulnerabilities, identified as "GhostApproval Symlink Flaws," exploit a mechanism where the AI assistant requests…
Sophos observed that AI coding agents are triggering endpoint security rules designed to detect human attackers. Analysis of a week's worth of Sophos endpoint data indicated that tools such as Claude Code, Cursor, and OpenAI Codex are setting off detection…
Anthropic announced Claude Science, a new flagship product aimed at supporting scientific research, during an event yesterday for pharmaceutical executives, biotech founders, and researchers. Similar to Claude Code's function for software engineering, Claude Science is designed to autonomously perform complex…