On November 7, 2026, Apiiro revealed that Claude Code’s .claude/settings.local.json file saves approved commands word-for-word — secrets included — and that 1,122 public copies of the file expose at least one secret. Rotate credentials first, then clean git history and add the file to the project’s .gitignore.
On October 29, 2026, Cursor’s extension marketplace served a falsified Anthropic.claude-code build (2.1.312 and 2.1.313) for about eleven hours, planting an SSH key and a persistent tunnel on developers’ machines. Up to 5,000 users are affected, and uninstalling the extension is not enough.
On October 21, 2026, Linus Torvalds merged into Linux 7.4 the removal of __get_user() and __put_user(), historical variants that do not validate the user address range and are therefore unsafe. He drafted the conversion partly with Claude Code, used “as a fancy sort of Coccinelle script”: AI is settling into kernel maintenance, including for eliminating whole classes of memory bugs.
On 11 October 2026, Linus Torvalds published a kernel branch that reads from the page cache without taking folio references, written with the Claude Code coding assistant to relieve contention between many threads reading one file. If you run a heavily concurrent file server, watch this patch series: it targets the exact multi-threaded small-read bottleneck you feel, and it may land in Linux 7.4.
Manifold Security disclosed on 2 September 2026 eight flaws across seven CLI coding agents: a repository delivered as an archive can trigger a local command on open, outside the sandbox and without approval, via Git’s core.fsmonitor setting. Disable core.fsmonitor by default and inspect .git/config before opening a received folder with an agent.
In Q2 2026, Anthropic more than doubled revenue to $11.6 billion and overtook OpenAI ($6.7 billion) for the first time, per the Wall Street Journal. The signal for buyers is clear: enterprise and coding AI earns, consumer AI costs.
On August 5, 2026, Meta entered the coding agent market with Muse Code, a terminal agent powered by Muse Spark 1.2. Rather than competing on raw model intelligence, Meta built the most advanced agent harness on the market: multi-agent fan-out, isolated git worktrees, full JSONL audit logging, and pricing up to 10× lower than Claude Code. Here’s what it means for DevOps teams.
On August 5, 2026, Novee Security demonstrated at Black Hat USA that a GitHub issue opened by an account with no write access was enough to execute arbitrary code on the CI runners behind Claude Code, Gemini CLI, and OpenAI Codex repositories. If your CI/CD pipeline executes code from GitHub issues without sandboxing, treat this as a CVE with no patch — yet.
