Darktrace researchers reported a lab test in which a stolen Claude key was used to send nine jobs through Claude's memory store and pull out a 1 GB file. All of that traffic went to api.anthropic.com. Source: Darktrace Signal Labs, Nov. 12, 2026, via Help Net Security, Nov. 12, 2026. If you use Claude Code at work, your API key just became a lot more valuable to attackers. Darktrace researchers showed that with a stolen Claude key, they could turn Claude Code into a remote-co

Cover stat: about 1,100 public copies of the file held secrets, from 63 organizations. Source: Apiiro research, reported by Ars Technica (Nov. 9, 2026), via Apple News: https://apple.news/ABrQKZA_uSCaay9e8LX9PHA and https://arstechnica.com/ai/2026/11/claude-code-settings-files-expose-thousands-of-secrets-on-github/. Illustrative file; the masked value is not a real secret. It might be. When you click "Yes, and don't ask again" in Claude Code, the tool can save the exact comma

GBrain is a shared memory layer for AI agents you already use, like Claude Code and Codex. It saves facts, people, companies, and meetings with their sources, so every agent you connect can recall them (GBrain repository). On Nov. 9, 2026, we ran our reconnaissance process on the public code. We found nothing malicious in what we read. It is MIT licensed and free to self-host, and there is fine print you should know before you install it. You can watch the review here: Watch