RyotaK

Microsoft Threat Intelligence identified a prompt-injection vulnerability in Anthropic's Claude Code GitHub Action that could expose CI/CD workflow secrets, according to the Microsoft Security Blog. S…

A flaw in Anthropic's Claude Code GitHub Action allowed attackers to bypass permission checks via a fake bot account and use prompt injection to steal OIDC tokens, gaining write access to any vulnerab…