An indirect prompt-injection attack targeting Claude Code, Anthropic’s agentic coding assistant, has demonstrated a full system compromise without placing a single line of malicious code in the repository. Researchers at Mozilla’s Zero Day Investigative Network (0DIN) have documented how the attack chain combines trusted agent behavior, routine error handling, and DNS-based payload delivery to silently […]
The post Claude Code Attack Uses DNS TXT Payload to Compromise Developer Machines appeared first on Cyber Security News.