<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Claude-Code on Security Unlocked</title><link>https://securityunlocked.com/tags/claude-code/</link><description>Recent content in Claude-Code on Security Unlocked</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Wed, 15 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://securityunlocked.com/tags/claude-code/index.xml" rel="self" type="application/rss+xml"/><item><title>Anthropic's Best Week and Worst Week Were the Same Week</title><link>https://securityunlocked.com/articles/anthropics-best-week-and-worst-week-were-the-same-week/</link><pubDate>Wed, 15 Apr 2026 00:00:00 +0000</pubDate><guid>https://securityunlocked.com/articles/anthropics-best-week-and-worst-week-were-the-same-week/</guid><description>Anthropic unveiled an AI that finds decades-old zero-days while shipping three injection flaws in its own CLI, exposing the gap between offensive capability and defensive practice.</description></item><item><title>Mythos Finds Zero-Days. npm Found Three More.</title><link>https://securityunlocked.com/weekly-intelligence/mythos-finds-zero-days.-npm-found-three-more./</link><pubDate>Sun, 12 Apr 2026 00:00:00 +0000</pubDate><guid>https://securityunlocked.com/weekly-intelligence/mythos-finds-zero-days.-npm-found-three-more./</guid><description>The same week Anthropic unveiled an AI that autonomously finds zero-days, its own CLI shipped a CVSS 9.8 command injection, exposed by a debugging artifact that had been sitting in an npm package since March 31.</description></item></channel></rss>