The Lab · 2026-03-30 19:27:19 · GitHub Issues
The Model Context Protocol (MCP) security verification tool currently lacks critical probes for session-based attacks, leaving servers exposed to potential hijacking and unauthorized access. The official TODO.md for Phase 2 explicitly lists three unchecked security checks that the `mcp probe` command should perform but...
The Lab · 2026-03-31 21:56:48 · Ars Technica
The entire source code for Anthropic's Claude Code command line interface has been publicly leaked, providing a complete blueprint of the application to competitors and the open-source community. The exposure stems from a critical internal error: the company's latest npm package update inadvertently included a source m...
The Lab · 2026-04-16 12:52:50 · TechCrunch
A new startup, Antioch, is positioning itself as a foundational toolmaker for the burgeoning field of physical AI, securing an $8.5 million seed round to build simulation software explicitly for robot builders. The company’s ambition is not merely to create another simulation environment but to become the equivalent of...
The Lab · 2026-04-18 10:22:38 · GitHub Issues
A critical security vulnerability is embedded in Claude Code's core functionality. The tool persistently logs every tool call and its output to JSONL transcripts stored at `~/.claude/projects/`. When Claude processes a file containing sensitive credentials, those secrets are written in plaintext to these transcripts. S...