I submitted a security report to Anthropic after Claude Code exposed my .NET User Secrets in its model context. They classified it as “Informative – Working as Designed.” “Working as designed” is a triage label, not a verdict. But taken at face value, it points to something architectural: security is enforced tool by tool, not around the agent as... Weiterlesen: When “Working as Designed” Is the Problem
Intelligence View
⚡ tsecurity.de Intelligence
When “Working as Designed” Is the Problem
I submitted a security report to Anthropic after Claude Code exposed my .NET User Secrets in its model context. They classified it as “Informative – Working as …
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
10 Quellen
CVE-2025-60991 | Codazon Magento Themes up to 2.4.7 cat cross site scripting
9 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2025-57444 | Radware AlteonOS Web UI Management 33.0.4.50 Administrative Interface Description cross site scripting VVulDB Updatesvor 1 Std.CVE-2025-57389 | Luci OpenWRT 18.06.2 /admin/system/packages cross site scripting VVulDB Updatesvor 6 Std.CVE-2026-120421 | Eclipse Mojarra up to 4.0.28/4.1.19/5.0.0-M11 Client Window jfwid/jakarta.faces.ClientWindow cross site scripting (Nessus ID 376800) VVulDB Updatesvor 5 Std.CVE-2025-57292 | Todoist 8484 Avatar cross site scripting VVulDB Updatesvor 4 Std.CVE-2022-4138 | GitLab Community Edition/Enterprise Edition Project cross-site request forgery (Issue 383709 / EUVD-2022-51500) VVulDB Updatesvor 4 Std.CVE-2026-120035 | meIsle RSS Aggregator Plugin up to 5.2.13 on WordPress item_title cross site scripting (EUVD-2026-118199)
+3
7 Quellen
CVE-2023-6121 | Linux Kernel TCP Subsystem fabrics-cmd.c out-of-bounds (EUVD-2023-58376 / Nessus ID 240010)
6 weitere Quellen
UUbuntu security noticesvor 5 Std.USN-9002-1: Linux kernel (NVIDIA Tegra) vulnerabilities UUbuntu security noticesvor 5 Std.USN-9003-1: Linux kernel (NVIDIA) vulnerabilities VVulDB Updatesvor 5 Std.CVE-2022-4128 | Linux Kernel MPTCP Protocol null pointer dereference (EUVD-2022-51493) VVulDB Updatesvor 5 Std.CVE-2022-4129 | Linux Kernel L2TP net/l2tp/l2tp_core.c sk_user_data null pointer dereference (FEDORA-2022-24041b1667 / EUVD-2022-51494) VVulDB Updatesvor 4 Std.CVE-2025-39916 | Linux Kernel up to fd3e613a912bbb344ee18579cc2ad3329aacba41 damon_reclaim_apply_parameters divide by zero (EUVD-2025-31835 / Nessus ID 269681) VVulDB Updatesvor 4 Std.CVE-2025-39891 | Linux Kernel up to 6.16.5 mwifiex_init_channel_scan_gap privilege escalation (Nessus ID 274583 / WID-SEC-2025-2170)
6 Quellen
I built AgentMon Live to keep track of Claude Code. Now it has a browser view.
5 weitere Quellen
ZZDNETvor 3 Std.I tried replacing Claude Code with a local AI stack that’s completely free – how it went ZZDNETvor 3 Std.I tried replacing Claude Code with a local AI stack that’s completely free – how it went ZZDNETvor 3 Std.I tried replacing Claude Code with a local AI stack that’s completely free – how it went ZZDNETvor 3 Std.I tried replacing Claude Code with a local AI stack that’s completely free – how it went DDEV Communityvor 3 Std.Teaching Claude Code to message my colleagues in my own voice
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4324516/sichere-programmierung/when-working-as-designed-is-the-problem/