Anthropic Compliance API adds local session transcript endpoints for Claude Code
Security Tool/Service
Summary
Hide ▲
Show ▼
Anthropic expanded the Compliance API for Claude Code with local session transcript endpoints, giving security teams better visibility into endpoint-side agent activity and governance over local AI agents on developer machines. The update surfaces `text`, `tool_use`, and `tool_result` blocks from local sessions, which helps track bash commands, file access, and MCP activity. It still leaves coverage gaps around local hooks, bypass modes, and non-Anthropic runtimes.
Related Happenings
Encrypted prompt injection in xAI's Grok web chat exfiltrates session context
Technical Analysis
H score22
First: 20.08.2026 17:36
Last: 20.08.2026 17:36
Sources 1
About this happening:
Researchers disclosed Cryptographic Context Injection, an encrypted prompt-injection technique that can make xAI's Grok web chat leak private session data through an outbo...
Encrypted prompt injection in xAI's Grok web chat exfiltrates session context
Technical AnalysisAbout this happening: Researchers disclosed Cryptographic Context Injection, an encrypted prompt-injection technique that can make xAI's Grok web chat leak private session data through an outbo...
AI coding-assistant guardrail bypass analyzed through recovered threat-actor prompt logs
Technical Analysis
H score23
First: 04.08.2026 16:30
Last: 04.08.2026 16:30
Sources 1
About this happening:
Researchers found that threat actors are bypassing commercial AI safety controls by splitting malicious work across multiple sessions and files, reducing the chance any si...
AI coding-assistant guardrail bypass analyzed through recovered threat-actor prompt logs
Technical AnalysisAbout this happening: Researchers found that threat actors are bypassing commercial AI safety controls by splitting malicious work across multiple sessions and files, reducing the chance any si...
Reproduced cross-vendor sandbox escapes in AI coding agents
Technical Analysis
H score22
First: 21.07.2026 00:14
Last: 21.07.2026 00:14
Sources 1
About this happening:
Researchers reproduced sandbox-escape bypasses across Cursor, Codex, Gemini CLI, and Antigravity, showing that agentic coding tools can cross the sandbox bound...
Reproduced cross-vendor sandbox escapes in AI coding agents
Technical AnalysisAbout this happening: Researchers reproduced sandbox-escape bypasses across Cursor, Codex, Gemini CLI, and Antigravity, showing that agentic coding tools can cross the sandbox bound...
Defensive guidance for splitting behavioral detections around AI coding agents on Windows endpoints
Defensive Guidance
H score28
First: 08.07.2026 20:02
Last: 08.07.2026 20:02
Sources 1
About this happening:
AI coding agents on Windows endpoints are triggering attacker-style detections, forcing defenders to separate benign automation from real credential theft risk. A June 2...
Defensive guidance for splitting behavioral detections around AI coding agents on Windows endpoints
Defensive GuidanceAbout this happening: AI coding agents on Windows endpoints are triggering attacker-style detections, forcing defenders to separate benign automation from real credential theft risk. A June 2...
HalluSquatting indirect prompt-injection attack on AI coding assistants
Technical Analysis
H score3
First: 08.07.2026 18:07
Last: 08.07.2026 18:07
Sources 1
About this happening:
Researchers demonstrated HalluSquatting, an indirect prompt-injection technique that can push AI coding assistants to fetch attacker-controlled resources and execute code....
HalluSquatting indirect prompt-injection attack on AI coding assistants
Technical AnalysisAbout this happening: Researchers demonstrated HalluSquatting, an indirect prompt-injection technique that can push AI coding assistants to fetch attacker-controlled resources and execute code....
Timeline
-
31.08.2026 14:31 2 articles · 2h ago
Anthropic adds local session transcript endpoints for Claude Code
Initial DisclosureAnthropic introduced new Compliance API endpoints for local sessions in Claude Code, extending visibility into endpoint-side activity by logging `text`, `tool_use`, and `tool_result` blocks from those sessions.
Show sources
- Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance — thehackernews.com — 31.08.2026 14:31
- Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance — thehackernews.com — 31.08.2026 14:31