Claude Code update v2.1.216 closes two permission bypass classes in auto mode — Bash compound-statement redirects and ...

ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

The automation should live with the programs it manages.

On July 1, 2026, a series of supplements were added to the Claude Code hook documentation. Rather than adding new features, this content clarifies the 'why' and 'how' regarding existing operations.

Separate Up/Down arrow history per project folder. Load project-local environment variables from .psctx.ps1. Show a prompt marker for managed and unmanaged folders. Add Bash-like conveniences such as ...