[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2t1MKlw1MkFD8F6XC9C8YGtZS5e-N4bF6TRIu0BcNm4":3},{"article":4,"iocs":56,"watch_terms":57,"solutions":58,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"c49939e9-1025-4e1e-8a77-c4755b937645","Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat","anthropic-sneakpeek-flaw-is-a-silent-zero-click-threat-27378f","A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.","A critical vulnerability, dubbed 'SneakPeek,' has been discovered in Anthropic's Claude Code Desktop application. This zero-click flaw allows attackers to silently steal sensitive developer credentials, including SSH private keys, AWS credentials, and Claude OAuth tokens, by exploiting the application's preview pane functionality. The exploit requires no user interaction, making it a significant threat to developers using the tool.","Anthropic Claude Code Desktop flaw allows silent zero-click credential theft.","https:\u002F\u002Fwww.darkreading.com\u002Fthreat-intelligence\u002Fnew-anthropic-sneakpeek-silent-zero-click-threat","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltebc5737d9330c848\u002F6acfd08de9c3113a94cf7694\u002Fcat_peek_Seregaff_Getty.jpg?width=720&quality=80&disable=upscale","2026-10-14T20:09:42+00:00","2026-10-14T22:00:08.42183+00:00",9,[17,20,23,26,28],{"name":18,"type":19},"Claude Code Desktop","product",{"name":21,"type":22},"Anthropic","vendor",{"name":24,"type":25},"SSH","technology",{"name":27,"type":25},"AWS",{"name":29,"type":25},"OAuth","574f766a-fb3f-487c-8d2c-0720ae75471b",{"id":30,"icon":32,"name":33,"slug":34},null,"Zero-day","zero-day",[36,41,46,51],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":47},{"id":48,"icon":32,"name":49,"slug":50},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":52},{"id":53,"icon":32,"name":54,"slug":55},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":59,"vendors":145},[60,89,118],{"slug":61,"name":62,"problem":63,"products":64},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"slug":90,"name":91,"problem":92,"products":93},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[94,102,110],{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"slug":119,"name":120,"problem":121,"products":122},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[123,130,137],{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":119,"product_name":127,"url":128,"description":129},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":131,"product_name":134,"url":135,"description":136},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",[],{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":164},"zero-click-sneakpeek-flaw-silently-exfiltrates-developer-credentials-from-claude-code","Zero-Click 'SneakPeek' Flaw Silently Exfiltrates Developer Credentials from Claude Code","The 'SneakPeek' vulnerability in Anthropic's Claude Code Desktop exploits the application's preview pane to silently steal highly sensitive credentials — including SSH private keys, AWS tokens, and OAuth secrets — without requiring any user interaction. This zero-click attack vector is particularly dangerous because traditional security awareness training offers no defense; developers cannot 'avoid' a threat they never see or trigger. The exposure of SSH and cloud credentials can cascade into full infrastructure compromise, lateral movement, and persistent unauthorized access. This incident highlights the risk of storing long-lived, high-privilege credentials in environments adjacent to third-party tooling. Developers and security teams must treat AI-assisted developer tools with the same scrutiny applied to any privileged software in the software supply chain.",[151,152,153,154,155,156,157,158,159,160,161,162,163],"CIS Control 7: Continuous Vulnerability Management","CIS Control 3: Data Protection","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 16: Application Software Security","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 AU-12: Audit Record Generation","NIST SP 800-53 SC-28: Protection of Information at Rest","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","NIST CSF PR.AC-1: Identities and Credentials Managed","GDPR Article 32: Security of Processing (where EU developer data is involved)","OWASP ASVS V2: Authentication Verification Requirements","ITIL Change Management: Emergency Change Procedures for Critical Vulnerabilities",{}]