Git

A security research report details 'Beltdown', a sandbox escape in Anthropic's Claude Code. By manipulating git configuration files and exploiting unhardened git commands, attackers could execute code on the host system.

Researchers have developed SWE-Bench Pro Verified to address critical reliability issues like reward hacking and task inaccuracies in existing software engineering benchmarks. The new benchmark uses anti-hacking controls and expert-led refinements to provide a more accurate assessment of LLM agent capabilities.

QuoteBench is a new benchmarking framework that exposes how the execution environment of LLM agents can corrupt Bash commands through parsing errors. It demonstrates that high 'matched' success scores often hide significant failures occurring at the boundary between model output and shell execution.

The article maps a highly interconnected ecosystem of automation operators who share obfuscation tools, device fingerprints, and distribution networks. By analyzing Git history deletions and shared code patterns, the author proves that seemingly independent actors are part of a unified supply chain.