#credentials

7 articles

Beware: Your Coding Agent Trips the Same EDR Rules Built to Catch Attackers

Sophos telemetry from June 2026 shows Claude Code, Cursor, and Codex setting off credential-access, LOLBin, and persistence rules …

Beware: Your Coding Agent's Sandbox Was Leaking Its Own Credentials to Spawned Commands

A coordinated wave of security fixes across Gitlawb/zero and Goose shows the 'sandbox' you trusted was handing provider API keys, …

Beware: Claude Code's permissions.deny Silently Fails on Absolute Paths — Your Credential Guard May Be a No-Op

A documented Claude Code behavior means a permissions.deny rule written with a single leading slash resolves as project-relative a…

Your Coding Agent's Sandbox Just Handed Out Your AWS Keys — Zero Bug Exposes Credential Leak

Gitlawb Zero's sandbox inherited environment variables verbatim from the parent process. AWS keys, GitHub tokens, database passwor…

Your Cron Jobs Were Leaking Secrets — Hermes Just Fixed the Security Hole

Hermes cron jobs were running under the wrong secret scope. A fix ensures every scheduled task uses the correct profile credential…

Hermes Just Plugged a Secret Leak You Probably Didn't Notice

Hermes added a case-insensitive .env file guard. If you thought naming a file '.ENV' would bypass detection — it won't anymore. He…

Security Deep-Dive: How Hermes Agent Protects Your API Keys and Credentials

Hermes Agent's credential guard system prevents provider API keys from leaking between tasks — here's how the security architectur…