Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers

Tel Aviv, Israel, July 24th, 2026, CyberNewswire One week after disclosing that Anthropic’s Claude Tag Slack integration could be driven by plain “@Claude” text, Tego AI today published a second piece of research on the Claude ecosystem. This one focuses on Claude Code, Anthropic’s agentic command-line coding tool. Cloning an ordinary repository and starting Claude Code can cause the tool to read a file from outside the project and include it in the model’s first request, without a warning or approval prompt the user would recognize. The technique is ordinary, and that is part of why it matters. A repository can commit a normal-looking instruction file, CLAUDE.md, whose @import directive points to...

Read the full article at the source.