How Claude Code’s 256KB blind spot put developers’ secrets in the preview pane
Noma says Claude Code's HTML preview could run malicious JavaScript and steal developer secrets; Anthropic patched it.
9
Stories per day · 30 days
2 RSS
2 stories, newest first · one card per story
Stories tagged #noma-security
One in four MCP servers opens AI agent security to code execution risk
Noma Security whitepaper finds most popular AI Skills and many MCP servers carry high-risk capabilities, with state changes most prevalent.
3