OpenAI’s Bubeck denies trying to cut Anthropic mathematician from credit35m ago 10 of the scariest AI villains in movie history36m ago Maven Robotics wants to steal your robot deployment deal37m ago Agent Security Is Not AI Governance: Why Conflating The Two Is A Risk Enterprises Can't Afford40m ago Positron Valued at $5 Billion in New Funding as Demand for AI Chips Surges47m ago 7 Steps to Become a Forward Deployed Engineer in 202654m ago Ramp eyes $60bn valuation three months after $44bn, Bloomberg reports1h ago Amazon partners with OpenAI to let users of Amazon's DSP run ads in ChatGPT in a pilot program limited to the US; ChatGPT Ads hit $1B in ARR last month1h ago D-Matrix Connects Raptor XPUs to NVIDIA AI Factories via NVLink Fusion2h ago Source: Meta AI researcher Andrew Tulloch, who came over from Thinking Machine Lab as one of the highest paid employees last year, is leaving the company (Reed Albergotti/Semafor)1h ago Mother Horrified When Instagram’s AI Scours Social Media for Invasive Information About Her Young Daughters1h ago Mach Industries, which makes unmanned military vehicles and weapons, raised $600M in an extension to its $300M Series C, doubling its valuation to $3.7B2h ago Salesforce Unveils Six-Capability Trusted AI Harness for Enterprises2h ago US closes $1.9bn loan to restart the Iowa nuclear plant powering Google2h ago

OpenAI’s Bubeck denies trying to cut Anthropic mathematician from credit35m ago 10 of the scariest AI villains in movie history36m ago Maven Robotics wants to steal your robot deployment deal37m ago Agent Security Is Not AI Governance: Why Conflating The Two Is A Risk Enterprises Can't Afford40m ago Positron Valued at $5 Billion in New Funding as Demand for AI Chips Surges47m ago 7 Steps to Become a Forward Deployed Engineer in 202654m ago Ramp eyes $60bn valuation three months after $44bn, Bloomberg reports1h ago Amazon partners with OpenAI to let users of Amazon's DSP run ads in ChatGPT in a pilot program limited to the US; ChatGPT Ads hit $1B in ARR last month1h ago D-Matrix Connects Raptor XPUs to NVIDIA AI Factories via NVLink Fusion2h ago Source: Meta AI researcher Andrew Tulloch, who came over from Thinking Machine Lab as one of the highest paid employees last year, is leaving the company (Reed Albergotti/Semafor)1h ago Mother Horrified When Instagram’s AI Scours Social Media for Invasive Information About Her Young Daughters1h ago Mach Industries, which makes unmanned military vehicles and weapons, raised $600M in an extension to its $300M Series C, doubling its valuation to $3.7B2h ago Salesforce Unveils Six-Capability Trusted AI Harness for Enterprises2h ago US closes $1.9bn loan to restart the Iowa nuclear plant powering Google2h ago

Cybersecurity Agents5 min reading time

A researcher hijacked Claude Code by asking it to summarise a web page

The Next WebPublished 9 days ago

Security researcher Johann Rehberger demonstrated a vulnerability in Claude Code's Auto Mode where the AI agent can be tricked into executing attacker-supplied code by manipulating web page responses and local Python module loading. This exploit leverages Claude's fallback to Bash commands and Python's module shadowing to run arbitrary code, including launching additional Claude instances with tool access.

More on this story

Breaking Claude Code Opus 5 Auto Mode
14d· Simon Willison's Weblog

#agentic-ai #ai-security #claude-code #johann-rehberger #python-security

More in Cybersecurity

Scoop: OpenAI faces GOP-led Senate investigation into Hugging Face breach

Covered by 3 sources6h ago

Cybersecurity6 min read

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Covered by 2 sources8h ago

Cybersecurity5 min read

Every AI Incident Has Two Timelines. We Default To One

Forbes3h ago