> TritonInfoSec News
Home / Nov 08, 2026 / Story
0
#9 The Hacker News general November 07, 2026 at 06:44 UTC

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

By [email protected] (The Hacker News)

AI Summary

Apiiro researchers identified 1,122 public GitHub repositories containing passwords and API keys inadvertently stored by Claude Code's 'Yes, and don't ask again' feature, which saves approved commands verbatim—including embedded secrets—to a project settings file. Developers using Anthropic's Claude Code should audit their repositories for exposed credentials in CLAUDE.md or similar settings files.

Read full article → https://thehackernews.com/2026/11/claude-codes-don…

Relevance score: 74.0/100

# More from November 08

  1. 1
    SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins SecurityWeek
  2. 2
    Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot The Hacker News
  3. 3
    OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits The Hacker News
  4. 4
    Chainalysis says breach exposed credentials for all customers BleepingComputer
  5. 5
    Hackers pull off $133 million French bank heist via service provider BleepingComputer
  6. 6
    Authorities accuse trio of using AI deepfakes to defraud $129M from businesses CyberScoop
  7. 7
    QNAP says hackers breaching NAS devices in Plex2Shell attacks BleepingComputer
  8. 8
    Certificate authority DigiCert reports data breach involving business customer info The Record
  9. 10
    Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack SecurityWeek