Symantec's Threat Hunter Team identified a relay service that has been installing genuine OpenAI Codex and Anthropic Claude Code command-line tools on enterprise systems since early 2026, primarily in mainland China, South Korea, Taiwan, and Malaysia. The service reroutes AI requests through its own infrastructure instead of OpenAI's or Anthropic's servers and disables built-in security safeguards, though researchers have not found evidence of malware or active exploitation yet.
darkreading.com
· 2026-10-29
A blog post challenges the common assumption that a post-scarcity, superintelligent-AI future means humans will simply 'hang out' in leisure, as depicted in sci-fi like the Culture novels. The author argues the social structures that normally bring people together—work, education, communities of practice like open-source coding—will be dissolved by AI making human collaboration unnecessary, and that AI-generated content offers an ever-improving alternative to real companionship.
borretti.me
· 2026-10-29
A community audit using Claude Code's own OpenTelemetry data found that the tool repeatedly sends each background agent's full transcript to its model (usually Opus) every ~30 seconds, asking for a 3-5 word summary of its last action, solely to update a status line. Flamerix AI's analysis found this 'agent_summary' traffic accounted for roughly 16-20% of API requests and spend, more than the main conversation itself, with no built-in setting to disable it since it became default in version 2.1.232. The developer released a Bun preload script, no-agent-summary.js, that intercepts and suppresses these summary calls without modifying the Claude Code binary.
gist.github.com
· 2026-10-29
A user running a security audit with Claude Code discovered that a hidden directory on their iPhone, PhotoData/Thumbnails, contained over 146,000 photos and videos they had deleted between 2021 and 2025, including some cleared multiple times from Recently Deleted. The files included sensitive images such as ID photos, bank screenshots and a crypto seed phrase, and were accessible to any of the 23 apps on the phone with file and folder permissions.
twitter.com
· 2026-10-28
Anthropic has launched new reporting tools that let enterprise managers analyze a team's work over a chosen period, including output, token costs, and where workflows stalled, drawing on internal analytics and employee surveys. The company says this data won't be used for model training by default and will include recommendations for improving results, alongside new pooled group budgets for managing team token spending.
techcrunch.com
· 2026-10-28
A Fiverr survey of 6,000 small business owners released in May 2025 found that 77% use generative AI for business, personal needs, or both. Fiverr's more recent June 2026 Business Trends Index shows searches for AI-related freelance services surging, including a 278% jump in Video & Animation, 94% in Programming & Tech, and 938% for Claude Code specialists, comparing November 2025–April 2026 to the prior six months.
entrepreneur.com
· 2026-10-27
Anthropic engineer Addy Osmani described how the Claude Code team restructured code review after merged changes in their monorepo jumped from roughly 2,500 per day in May to over 30,000 per day in September. The team now runs changes through six sequential checks—pre-PR verification, AI review, security review, CI, risk-scaled human approval, and staged rollout with revert—rather than relying on a single reviewer. Merged pull requests on Claude Code repositories more than doubled between June and September while reverts dropped by over 40%.
djordjepuzic.com
· 2026-10-27
Forever Security researchers Gal Weizman and Omer Samet discovered an in-the-wild attack in which a malicious file named AGENTS.md was planted in a customer's downloads folder, disguised as engineering notes. When AI coding agents like OpenAI's Codex or Claude Code read the file as trusted project context, it could prompt them to rewrite their own configuration, enabling further attacker actions such as credential theft. The firm says it intercepted and stopped the attack before any malicious code executed.
darkreading.com
· 2026-10-26
Anthropic's SEC filing reveals that more than half of customers spending over $100,000 annually now use both the Claude platform and a first-party app such as Claude Code or Cowork, up from roughly 30% at the end of last year. The company reported over 11,900 customers spending at least $100,000 annually, more than 1,900 spending over $1 million, and about 250 spending $10 million or more, alongside net revenue retention of roughly 900% as of the end of Q3.
techcrunch.com
· 2026-10-26
A Redditor building a Mac temperature-monitoring app with Claude Code AI discovered their machine was overheating because of a cryptominer called xmrig consuming roughly 1,175% CPU usage across about 12 cores, pushing CPU temperatures to 112°C. Claude's report flagged the miner and included an unprompted statement denying it had installed the software itself, which was shared by Reddit user UntilHEX.
9to5mac.com
· 2026-10-26
Forever Security researchers discovered a malicious AGENTS.md instruction file in a customer's Downloads folder that caused an AI coding agent to attempt installing a rogue npm package called 'function-color.' They reproduced the attack against OpenAI Codex and showed a similar technique against Claude Code that could leak OAuth tokens and hijack accounts, all using only crafted text instructions placed in the agent's working directory.
bleepingcomputer.com
· 2026-10-25
A new tool called Corgi was shown on Hacker News as a terminal multiplexer designed to manage both human workflows and AI agents like Claude Code, Codex, Pi, and OpenCode in one interface. It tracks agent status (working, needs attention, finished, idle), keeps sessions and processes running in the background, and shows file changes and token usage per workspace. Corgi is installable via a curl script and supports features like image pasting over SSH, worktree organization, and scripting via a '--skill' command.
corgi.computer
· 2026-10-23
GoKawiil