Claude Code 2.1.277 reads AGENTS.md when CLAUDE.md is missing
Claude Code 2.1.277 now falls back to AGENTS.md when no CLAUDE.md is in the folder, aligning with OpenAI’s agent-instructions format used by Codex and 60k+ repos. Toggle it with /config.
NewsView all
More news
MCP Python SDK: malicious servers could steal OAuth credentials
Cycode found the official MCP Python SDK (1.9.1–1.29.1 / 2.0.0–2.1.1) could skip issuer checks on OAuth discovery fallbacks, letting a malicious MCP server harvest client secrets, auth codes, and PKCE keys (GHSA qx49 fqc8 xw99, CVSS 7.5). Fixed in 1.30.0 / 2.2.0—machine to machine providers also need an explicit issuer= argument…
OpenAI: Sign in with ChatGPT spends your plan in third-party tools
At DevDay (Sept 29), OpenAI expanded Sign in with ChatGPT so Plus/Pro subscribers can burn ChatGPT Work/Codex allowance inside Amp, Devin, Warp, OpenClaw, OpenCode, Notion, Vercel, and other launch partners—with per app weekly caps that stop included usage instead of auto billing the partner…
Claude Code: build-eval and hillclimb tune agents without overfitting
Anthropic’s claude api skill adds /claude api build eval (guided eval design in your repo) and /claude api hillclimb (one change per round tuning with a held out set to catch overfitting). On an internal support bench, hillclimb lifted search accuracy from 74.4% to 98.9% while cutting cost to about one fifth…
Claude Code 2.1.285: disable WebFetch, admins lock API providers
Claude Code 2.1.285 (npm Sept 29) adds CLAUDE CODE DISABLE WEB FETCH to turn off WebFetch and a managed allowedProviders policy so admins can lock machines to Anthropic, Bedrock, Vertex, Foundry, or a cloud gateway. It also ships claude desktop , claude plugin configure , and a fix for URL passwords leaking past log redaction…
PixelLeak: AI agents put 13k+ corporate screenshots on public GitHub
Glow Security found 13,000+ internal screenshots from 343 orgs on public GitHub—coding agents hosted before/after UI images there because GitHub has no CLI image upload for private PRs. About a third involved gitshot’s public by default image repo; the rest were agents creating their own public workarounds…
Spotted something we missed? Start a thread.