security2 articles
Capital One Releases AI Vulnerability Hunter to the Public
Capital One has open-sourced an internally developed AI-powered security tool called VulnHunter, designed to identify and fix software vulnerabilities at the code level. Unlike traditional scanners, it uses an agentic reasoning workflow to map attack paths, propose targeted code fixes, and reduce false positives that slow developer workflows. The company released it publicly on GitHub, citing the need for widely distributed defensive tools to address the interconnected risks of modern software supply chains.
Anthropic quietly buried hidden tracking code in Claude Code. Now it's removing it.
Anthropic has announced it will remove hidden steganographic code from its Claude Code tool, which was secretly embedded in system prompts to detect and flag unauthorized resellers and rival AI companies — particularly Chinese labs — attempting to copy its models through repeated queries. A developer discovered the concealed mechanism, which used invisible Unicode markers, XOR encoding, and base64 to hide a domain blacklist, raising concerns about transparency in a tool that asks users for trust. Anthropic says stronger anti-distillation measures are already in place and the code removal was merged and scheduled for release on July 1st.