Cybersecurity · 4 views
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem
A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other secrets, according to findings by GitGuardian.
Summary
A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other secrets, according to findings by GitGuardian. The code security firm identified 31,088 distinct secrets in Claude Code’s “.claude/settings.local.json” files across 23,276 public GitHub repositories.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Bay Raises $50 Million to Control What Enterprise AI Agents Can DoContinue reading
- Microsoft fixes audio issues caused by September security updatesContinue reading
- Dreeze Emerges From Stealth With $33M to Rebuild Cloud Apps After CyberattacksContinue reading
- ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell ExposureContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow