16:[[47967041,{"by":"napolux","descendants":0,"id":47967041,"kids":[47994262,47994624],"score":4,"time":1777576804,"title":"Claude Security enters public beta","type":"story","url":"https://claude.com/product/claude-security"}],[47986839,{"by":"mooreds","descendants":0,"id":47986839,"kids":[47994613,48021205],"score":1,"time":1777733106,"title":"Claude Code, Copilot and Codex got hacked. Attackers went for the credentials","type":"story","url":"https://venturebeat.com/security/six-exploits-broke-ai-coding-agents-iam-never-saw-them"}],[47748689,{"by":"saranshrana","descendants":2,"id":47748689,"kids":[47753046,47749239,47748784,47767144],"score":2,"text":"Our team uses Claude Code, OpenClaw, Claude CoWork and Cursor daily. These tools run shell commands, read files, and call APIs autonomously. We have zero visibility into what happens between the model deciding to act and the action completing. Curious how others are approaching this.","time":1776064089,"title":"Ask HN: How are you handling runtime security for your AI agents?","type":"story"}],[47718155,{"by":"edwardsrobbie","descendants":21,"id":47718155,"kids":[47720222,47726262,47720353,47725277,47719675,47721745,47722059,47721683,47741182,47720747],"score":44,"time":1775828990,"title":"Anthropic's Claude Mythos isn't a sentient super-hacker, it's a sales pitch","type":"story","url":"https://www.tomshardware.com/tech-industry/artificial-intelligence/anthropics-claude-mythos-isnt-a-sentient-super-hacker-its-a-sales-pitch-claims-of-thousands-of-severe-zero-days-rely-on-just-198-manual-reviews"}],[47679121,{"by":"Ryan5453","descendants":836,"id":47679121,"kids":[47685285,47679745,47679406,47679397,47688452,47686445,47679653,47681769,47681825,47685847,47681896,47690125,47679433,47681164,47683200,47680125,47679428,47683506,47681367,47679529,47679364,47679276,47679418,47682135,47681619,47680897,47680272,47679542,47680698,47681369,47680503,47680291,47681069,47741137,47692284,47689809,47686948,47711779,47680155,47686020,47681915,47680297,47679706,47680782,47681767,47688907,47687352,47719445,47686366,47700656,47679453,47685607,47680574,47688043,47679798,47679658,47687011,47687355,47679578,47686075,47682700,47687968,47681998,47689226,47682001,47686900,47690102,47686099,47692669,47686552,47679215,47680523,47679450,47683941,47689899,47688534,47685560,47683243,47679814,47680936,47681984,47686984,47683528,47682613,47693287,47683309,47689041,47681082,47686233,47688691,47680067,47679922,47682257,47684947,47680251,47685058,47679464,47686465,47679427,47686200,47679625,47692195,47688185,47681480,47680907,47679502,47685107,47739184,47718139,47686946,47685492,47681422,47679969,47691478,47689322,47682033,47686895,47765782,47679574,47679635,47682494,47687830,47689087,47682946,47685290,47694865,47691124,47685088,47681682,47708293,47683028,47708943,47685017,47681426,47681901,47685520,47685093,47679311,47680078,47689160,47683957,47686439,47687975,47686849,47681327,47679305,47680347,47681639,47681772,47681981,47680086],"score":1541,"text":"Related: Assessing Claude Mythos Preview's cybersecurity capabilities - https://news.ycombinator.com/item?id=47679155

System Card: Claude Mythos Preview [pdf] - https://news.ycombinator.com/item?id=47679258

Also: Anthropic's Project Glasswing sounds necessary to me - https://news.ycombinator.com/item?id=47681241","time":1775585374,"title":"Project Glasswing: Securing critical software for the AI era","type":"story","url":"https://www.anthropic.com/glasswing"}],[47597648,{"by":"mdjanic","descendants":8,"id":47597648,"kids":[47752556,47740943,47601733,47603177,47672376],"score":14,"text":"$17","time":1775025741,"title":"Show HN: rmBug – audited database access for humans and agents","type":"story","url":"https://rmbug.com/"}],[47689822,{"by":"JoshBlythe","descendants":1,"id":47689822,"kids":[47740905,47846634,47690227],"score":2,"text":"$18","time":1775654291,"title":"Ask HN: What's the state of multimodal prompt injection defence in 2026?","type":"story"}],[47601315,{"by":"sonabinu","descendants":8,"id":47601315,"kids":[47602054,47603036,47607025,47623415],"score":22,"time":1775053177,"title":"Anthropic Races to Contain Leak of Code Behind Claude AI Agent","type":"story","url":"https://www.wsj.com/tech/ai/anthropic-races-to-contain-leak-of-code-behind-claude-ai-agent-4bc5acc7"}],[47574045,{"by":"mcheemaa","descendants":16,"id":47574045,"kids":[47576124,47574925,47587107,47574775,47574736,47574984,47651137,47623399,47611930,47593680,47574068,47577600],"score":18,"time":1774877400,"title":"Show HN: Phantom – Open-source AI agent on its own VM that rewrites its config","type":"story","url":"https://github.com/ghostwright/phantom"}],[47597119,{"by":"ishqdehlvi","descendants":105,"id":47597119,"kids":[47598870,47605095,47598915,47599089,47602317,47599945,47598883,47604773,47602380,47598889,47609221,47602917,47639247,47601812,47599765,47599993,47623390,47599542,47604649,47601321,47603930,47600134,47600431,47601709,47600349,47603426,47599858,47598830,47598871],"score":270,"time":1775020908,"title":"Claude wrote a full FreeBSD remote kernel RCE with root shell","type":"story","url":"https://github.com/califio/publications/blob/main/MADBugs/CVE-2026-4747/write-up.md"}],[47582220,{"by":"mtud","descendants":807,"id":47582220,"kids":[47584459,47582484,47582632,47582652,47586783,47582834,47582778,47591423,47582927,47582455,47589438,47583469,47583251,47586362,47587174,47582667,47589068,47582781,47584949,47592694,47582823,47583860,47584045,47585047,47583086,47590843,47583714,47583899,47587703,47582443,47595445,47587890,47583220,47583721,47587810,47584225,47582423,47582937,47582685,47583943,47583723,47588756,47588279,47584242,47583817,47590966,47582488,47582221,47584607,47586059,47583666,47582738,47586258,47584228,47583515,47583468,47594810,47584526,47587336,47582702,47595642,47584621,47602218,47588694,47583304,47588704,47620260,47583689,47598738,47584991,47587241,47587377,47587672,47589206,47589647,47590172,47582893,47614440,47583619,47586428,47603554,47586013,47586752,47591374,47586368,47582759,47583372,47594582,47590485,47586529,47584496,47584310,47590679,47588939,47583981,47582649,47588524,47591721,47583087,47595396,47584187,47588522,47586240,47583954,47582454,47590635,47585819,47584440,47585079,47583612,47586198,47584442,47586539,47585384,47587289,47609326,47582688,47590326,47584581,47588348,47591188,47583453,47603160,47591941,47592646,47584137,47587370,47596371,47588599,47598175,47584257,47596810,47587767,47594280,47588256,47584068,47598876,47596700,47597264,47593732,47606189,47583510,47585319,47592020,47597356,47593815,47587362,47582650,47584050,47590224,47583294,47586775,47582782,47587558,47582656,47583098,47588165,47582448],"score":1934,"time":1774925657,"title":"Axios compromised on NPM – Malicious versions drop remote access trojan","type":"story","url":"https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan"}],[47570269,{"by":"pavo-etc","descendants":643,"id":47570269,"kids":[47571336,47573233,47572133,47570885,47575592,47575691,47570673,47570820,47571968,47570532,47575427,47570734,47575523,47571455,47574215,47570695,47570751,47574354,47570691,47581460,47570682,47575496,47576300,47571724,47576119,47570763,47570949,47571919,47571608,47575351,47576077,47570954,47571449,47570671,47571324,47571810,47578073,47576882,47570919,47576424,47576603,47582147,47577235,47575374,47575936,47578944,47577011,47575370,47579067,47576264,47576248,47576932,47573006,47574137,47576098,47571247,47575532,47570865,47576139,47571320,47573011,47575337,47571381,47576397,47575967,47575906,47573121,47570704,47570917,47572235,47570886,47571136,47572495,47576026,47578319,47580821,47571416,47571353,47573099,47572807,47571978,47573376,47570786,47576867,47572832,47576795,47576998,47571935,47579922,47586509,47573284,47576020,47582224,47571158,47577228,47570736,47571961,47570687,47570649,47576946,47570913,47570657,47574162,47571333,47575945,47572982,47570818,47571216,47570727,47574803,47570857,47576147,47570679,47570652,47575856,47576748,47570694,47575918,47596379,47576087,47573597,47576071,47575867,47574537,47570920,47575646,47579330,47575372,47572790,47576120,47576307,47575418,47575747,47571132,47576184,47586281,47571075,47572498,47570899,47576001,47577243,47575199,47570906,47570776,47580613,47575025,47578363],"score":1606,"time":1774843471,"title":"Copilot edited an ad into my PR","type":"story","url":"https://notes.zachmanson.com/copilot-edited-an-ad-into-my-pr/"}],[47586778,{"by":"alex000kim","descendants":578,"id":47586778,"kids":[47601622,47591989,47592502,47592074,47593268,47594193,47591681,47595088,47591669,47591890,47592399,47594158,47591708,47592402,47595682,47598661,47595336,47591198,47594662,47595607,47597064,47597882,47592051,47593886,47593286,47650330,47595462,47591670,47592609,47591585,47592497,47593307,47597160,47593509,47594171,47592368,47595132,47592358,47602209,47593371,47595691,47592001,47594222,47597983,47593308,47592396,47592336,47593954,47596806,47594339,47591628,47596390,47592638,47597236,47595622,47592493,47595637,47594867,47593537,47594744,47595168,47597208,47595907,47593649,47601581,47595497,47594933,47598885,47591499,47594964,47595090,47596759,47706671,47596582,47598186,47596388,47594260,47598793,47601954,47596179,47596348,47601933,47597678,47594105,47598471,47596188,47594281,47594046,47592744,47599100,47592573,47612670,47601916,47595016,47601974,47598573,47651741,47594113,47595942,47595946,47598909,47596383,47595254,47593338,47592024],"score":1376,"text":"Related ongoing thread: Claude Code's source code has been leaked via a map file in their NPM registry - https://news.ycombinator.com/item?id=47584540

Also related: https://www.ccleaks.com","time":1774962270,"title":"The Claude Code Source Leak: fake tools, frustration regexes, undercover mode","type":"story","url":"https://alex000kim.com/posts/2026-03-31-claude-code-source-leak/"}]]

user:	navilai
created:	March 28, 2026
karma:	1
about:	Founder, Navil (navil.ai) — open-source runtime security for AI agents. Interested in agent security, MCP, and threat intelligence. navil.ai