Alibaba has banned employees from using Anthropic’s Claude Code over security and data concerns. The move shifts staff to Alibaba’s own coding tool, Qoder. The decision follows reports the tool may ...

Indirect prompts hidden in a repository can lead to Claude Code spawning a reverse shell on the developer’s machine. Attackers can take over developers’ systems by hiding indirect prompts in ...

Abstract: The increasing use of large language models (LLMs) such as OpenAI's ChatGPT and Google's Bard in the software development industry raise questions about the security of generated code. Our ...

Abstract: Recent advances of artificial intelligence (AI) code generators are opening new opportunities in software security research, including misuse by malicious actors. We review use cases for AI ...