Find notable cyber news and cases, enriched with sources, timelines, and signals.

Anthropic Claude Code usage-limits bug causing faster exhaustion

Service Disruption
First reported
Last updated
Happening score
H score 12
1 unique sources, 1 articles

Summary

Hide ▲

Anthropic is investigating a Claude Code bug that makes usage limits exhaust much faster than expected, leaving affected users blocked from normal use. The issue was still unresolved as of March 31, 14:00 PM ET, and Anthropic said it was the top priority for the team. The company said it will share more once it has an update.

Related Happenings

MCP STDIO arbitrary command execution security flaw

Vulnerability
First: 16.04.2026 12:40 Last: 16.04.2026 12:40 Sources 1

About this happening: A **critical MCP flaw** in the **STDIO interface** can trigger **arbitrary command execution**, putting **connected AI systems** at risk of **data exposure** and **system takeover...

Claude Code deny-rule bypass fix (version 2.1.90)

Security Patch Release
First: 08.04.2026 12:16 Last: 08.04.2026 12:16 Sources 1

About this happening: **Anthropic** released **Claude Code version 2.1.90** last week to fix a command-parsing flaw that could let **user-configured deny rules** silently stop applying when a command e...

Anthropic launches Project Glasswing with Claude Mythos for vulnerability discovery

Security Tool/Service
First: 08.04.2026 12:16 Last: 08.04.2026 12:16 Sources 1

About this happening: **Anthropic’s Project Glasswing** is now showing measurable results: since launching last month, the **Claude Mythos Preview**-based initiative has uncovered **more than 10,000**...

Latest development: 23.05.2026 14:55

Anthropic said Project Glasswing has uncovered more than 10,000 high- or critical-severity vulnerabilities across widely used software since the program launched last month, including 6,202 high/critical flaws affecting more than 1,000 open-source projects, 1,726 validated true positives, 1,094 high/critical flaws, a critical WolfSSL flaw tracked as CVE-2026-5194 with CVSS score 9.1, 97 upstream patches, and 88 advisories.

Claude Code leak GitHub Vidar lure campaign

Campaign
First: 02.04.2026 23:30 Last: 02.04.2026 23:30 Sources 1

About this happening: A **malicious GitHub repository campaign** is abusing the **Claude Code leak** to deliver **Vidar** to users searching for leaked code. The lure uses a **fake leak**, **search-eng...

Anthropic Claude Code source code leak from NPM release

Data Leak
First: 01.04.2026 03:32 Last: 01.04.2026 03:32 Sources 1

How related: The source code was mistakenly leaked by Anthropic when they briefly published Claude Code version 2.1.88 on NPM earlier today.

About this happening: Anthropic **mistakenly exposed** proprietary **Claude Code** source code through a **NPM** release, allowing the codebase to be reconstructed and spread online. The leak involved...

Latest development: 02.04.2026 23:30

Threat actors are using fake GitHub repositories to exploit the Claude Code source code leak and lure users searching for leaked Claude Code into downloading a 7-Zip archive that launches ClaudeCode_x64.exe and drops Vidar and GhostSocks; Zscaler says the bogus repository is SEO-optimized for Google Search queries like “leaked Claude Code.”

Timeline

  1. 31.03.2026 21:00 2 articles · 1mo ago

    Anthropic investigates Claude Code limits exhausting too fast

    Initial Disclosure

    Anthropic says Claude Code users are hitting usage limits much faster than expected, and the company confirmed it is actively investigating the bug. As of March 31, 14:00 PM ET, the issue remained unresolved and was the top priority for the team.

    Show sources