Cybersecurity · 5 views
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem
A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other secrets, according to findings by GitGuardian.
Summary
A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other secrets, according to findings by GitGuardian. The code security firm identified 31,088 distinct secrets in Claude Code’s “.claude/settings.local.json” files across 23,276 public GitHub repositories.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- N-able releases security hotfixes for zero-day vulnerabilitiesContinue reading
- Rewriting less than 10 neurons in an LLM can turn it into a sleeper backdoorContinue reading
- Finite State Raises $27 Million to Secure Software and Firmware in Connected DevicesContinue reading
- Bay Raises $50 Million to Control What Enterprise AI Agents Can DoContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow