Security

Claude Code Has Two New CVEs — Here's What They Exploit and How to Harden Your Setup

David O'Neil
Cybersecurity
03 Mar, 2026

Your engineers cloned repositories today. Probably dozens. If any of those repos contained a malicious .claude/settings.json, they may have executed arbitrary shell code without a single confirmatio

How I Made Claude Code Safer (And You Can Too)

David O'Neil
Cybersecurity
10 Feb, 2026

I've been running Claude Code on real projects for months. It's great at writing code — but it doesn't always understand the consequences of what it writes. Claude Code validates which tools can run.