Claude Code patches 15 guardrail bypasses across two releases in two days

·3 views

Two Claude Code releases, 2.1.309 on October 22 and 2.1.310 on October 23, fixed a series of flaws where safety controls failed to stop what they were meant to block. The analysis counts 15 such entries, with one bug-fix entry covering two separate issues, bringing the total to 16. A key example was a deny rule on file edits that a Bash redirect could bypass, since shell commands act as a separate permission surface. Other fixes addressed sandbox boundaries that did not fully hold, including startup files running outside the sandbox and the MCP config file being writable by sandboxed processes. The author argues that permission config files are only declarations, with enforcement depending on software that can have bugs.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Xplora 1.0.0 Released With WordPress 7.1 Engine and Custom Avatars

Version 1.0.0 of Xplora is now available to users. The update adopts WordPress 7.1 as the platform's underlying engine. Users can now upload and edit custom avatars instead of depending on Gravatar. The release also includes fixes and functional improvements to user profiles, along with security adjustments and general stability work. The developers describe this version as a new step in Xplora's ongoing development.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

cloudg: open-source CLI maps and audits AWS, Azure and GCP resources as a graph

A cloud security practitioner has released cloudg, an MIT-licensed Python tool that builds a connected graph of assets across AWS, Azure and GCP. Unlike scanners that produce flat lists of misconfigurations, cloudg records typed relationships between resources, such as a storage bucket invoking a Lambda function or a function assuming a role. The tool can also run Prowler, ScoutSuite, Checkov and Trivy over the same inventory, attaching each finding to the asset it concerns and mapping results to 28 compliance frameworks. Users can query dependencies with the deps command, and the cloudg run pipeline produces an offline HTML report with a topology view and findings table. The current release on PyPI is version 0.6.1, and the project requires Python 3.11 or newer.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Windows Server 2016 Nears End of Extended Support; Engineer Shares In-Place EC2 Upgrade Process

Windows Server 2016 reaches the end of extended support on January 12, 2027, prompting organizations running it on Amazon EC2 to plan upgrades. One engineer upgraded more than 10 EC2 instances in place to Windows Server 2022, using an AI agent for pre- and post-upgrade validation while a human approved each step. Key lessons included pinning the Windows edition to avoid stalls, enforcing a 20 GB free-disk-space requirement after a root volume was expanded from 30 GB to 50 GB, and avoiding copying installation media onto the C: drive. The engineer also recommended using Replace Root Volume rather than AMI restoration for rollback, since the latter changes the instance ID and IP address, and starting with a canary upgrade on a single server. Finally, the account advised testing application functionality rather than only the OS version, and verifying that SSM connectivity and patch-tool OS detection are working after the upgrade.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Some 492,000 MinIO Hosts Found Online, Exposing Object Storage Risks

A ZoomEye index snapshot from October 2026 found 492,113 hosts whose page titles match MinIO, versus 261,617 by application fingerprint. The gap is attributed to the product's console and API surfaces responding differently to scans, plus MinIO being bundled inside other software. The counts reflect detectable fingerprints, not open buckets, since public indexes cannot enumerate bucket contents. The analysis stresses that object stores accumulate historical data such as old backups and dumps, that bucket policies are easy to misconfigure, and that anonymous reads leave few traces. Organisations are advised to audit their own address space, distinguish console exposures (a credential risk) from API exposures (a data risk), and check log retention.

0 comments Read more at DEV Community