Loading story…
Anthropic released a “Remote Control” capability for Claude Code that lets developers start an agentic terminal session locally and then continue interacting with it from a phone, tablet, or web browser. The feature is rolling out as a research preview for Max users and can be initiated via claude rc / claude remote-control, with an option to enable it by default for all sessions; access is provided through a session URL, QR code in the mobile app, or via claude.ai session selection.
From a security and architecture standpoint, the remote interface acts as a front-end while execution remains on the user’s machine, retaining access to the local filesystem, environment variables, and local Model Context Protocol (MCP) servers. Both write-ups state the local agent makes outbound HTTPS connections only (no inbound ports opened), registers/polls via the Anthropic API, and routes traffic over TLS using short-lived tokens; each Claude Code instance supports one active remote session to reduce conflicts and limit exposure.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Anthropic introduced a new Remote Control feature for Claude Code that lets developers continue a local terminal coding session from a phone, tablet, or web browser while execution remains on the user's machine. The feature rolled out as a research preview for Max users, using outbound-only HTTPS, TLS, and short-lived purpose-scoped credentials.
Anthropic patched a Claude Code vulnerability tracked as CVE-2025-59536 that could enable remote code execution and API token exfiltration through project configuration files and MCP integrations. The fix added explicit user-consent requirements for MCP execution and network operations.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcehelpnetsecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Anthropic released an update that lets **Claude** interact with third-party workplace applications *inside* the chat interface using the open **Model Context Protocol (MCP)**, reducing the need to switch between separate app tabs. The capability supports interactive embedded experiences (e.g., project boards, dashboards, design canvases, messaging) so users can view and edit content from services such as **Slack, Asana, Box, Canva, Figma, Hex, and monday.com** directly within Claude, including workflows like drafting incident communications or updating task timelines. The implementation is powered by an MCP extension described as **MCP Apps**, which allows an MCP server to provide an interactive UI that can render and accept user actions within an AI product. ZDNET characterized the move as part of Anthropic’s broader push to make Claude a primary work interface, building on earlier “connector” approaches that primarily moved data via prompts; the new approach enables more direct, app-native style interaction within the Claude conversation. A separate ZDNET piece offering general “IT playbook” guidance for the AI era does not provide substantive details about this specific Claude/MCP integration update.
Jun 29, 2026
Anthropic announced **Claude Code Security**, an embedded capability in *Claude Code* that scans customer codebases for vulnerabilities and suggests patches, initially rolling out to a limited set of enterprise/team customers for testing. The company said the feature was stress-tested via internal red-teaming, Capture-the-Flag exercises, and collaboration with **Pacific Northwest National Laboratory**, and positioned it as a way to reduce reliance on manual security reviews as AI-assisted “vibe coding” increases and attackers also use AI to accelerate weakness discovery. In parallel, Anthropic released **Claude Sonnet 4.6**, emphasizing improved coding performance, stronger “computer use” capabilities, and expanded developer tooling (e.g., adaptive/extended thinking modes, beta context compaction, and API tools for web search/fetch and code execution). Separate commentary highlighted the security risk of **agentic coding assistants** (e.g., *Claude Code*, *Cursor*, *GitHub Copilot*) operating with broad privileges—file access, shell execution, and secret handling—and argued that the emerging **Model Context Protocol (MCP)** ecosystem needs stronger, future-proof identity controls; additional industry guidance promoted **MLSecOps** as a way to integrate security into AI/ML development lifecycles, though it did not report a specific incident or vulnerability.
Jun 29, 2026
Security researchers disclosed multiple vulnerabilities in **Anthropic’s Claude Code** AI coding assistant that could enable **arbitrary command execution** and **exfiltration of Anthropic API credentials** when developers clone/open a malicious repository. Check Point Research reported the issues abuse Claude Code configuration and initialization paths—particularly **project hooks** (e.g., untrusted `.claude/settings.json`), **Model Context Protocol (MCP) servers**, and **environment variables**—to trigger shell command execution and data theft. Anthropic’s advisory for **CVE-2026-21852** describes a project-load flow where a crafted repo can set `ANTHROPIC_BASE_URL` to an attacker-controlled endpoint, causing Claude Code to send API requests **before** the trust prompt is shown, potentially leaking the user’s API key. The disclosed issues include two high-severity code-injection paths (CVSS **8.7**) and one information-disclosure flaw (CVSS **5.3**): a consent-bypass/hook-based injection issue fixed in *Claude Code* **1.0.87** (Sept 2025), **CVE-2025-59536** fixed in **1.0.111** (Oct 2025), and **CVE-2026-21852** fixed in **2.0.65** (Jan 2026). Separate coverage framed Anthropic-related developments as market-moving, noting investor attention around Anthropic’s AI code-security tooling; however, the actionable security impact in this reporting is the risk that simply opening an attacker-controlled repository can lead to **RCE** and **credential leakage**, reinforcing the need to treat untrusted repos and tool initialization behaviors as a supply-chain and developer-workstation risk.
Jun 29, 2026