Anthropic disclosed a potential session and cache leakage vulnerability affecting Claude Code that could expose user data across different workspace instances and consumer accounts. The issue was reported on GitHub and has generated significant discussion in the developer community.
The vulnerability, documented in Anthropic's Claude Code repository, involves improper isolation of session data and cached information between separate workspace environments and consumer user accounts.
Details remain limited in the initial disclosure, though the issue has attracted 107 upvotes and 36 comments on Hacker News, indicating community concern about the security implications.
Session leakage vulnerabilities can expose sensitive information including authentication tokens, API keys, user preferences, and conversation history if session data from one user or workspace becomes accessible to another.
Anthropics has not yet provided a formal security advisory or timeline for remediation in available public statements. Users relying on Claude Code for sensitive work should monitor official channels for security updates and guidance.
The disclosure follows standard responsible vulnerability reporting practices, with the issue tracked publicly on GitHub for transparency with developers using the platform.
A US federal judge dismissed a class action lawsuit accusing Apple of failing to prevent child sexual abuse material from spreading through iCloud, citing Section 230 protections for online platforms.
A threat actor has created nearly 300 fraudulent GitHub repositories impersonating legitimate software and security projects to distribute infostealer malware to unsuspecting developers.
LastPass has issued a warning about an active phishing campaign using fraudulent security notices to redirect users to malicious websites. The scheme targets both LastPass and Bitwarden password manager users.
Microsoft has rolled out cumulative updates KB5101650 and KB5099414 for Windows 11, addressing security vulnerabilities and bugs across multiple versions. The updates target versions 25H2/24H2 and 23H2.