The Ministry of Industry and Communications has released a risk alert on the safe back door of Claude Code, an AI programming tool

On 8 July, monitoring by the Ministry of Industry and Information Technology ' s Web Security Threats and Gap Information Sharing Platform (NVDB) found that the AI programming tool Claude Code had a security back door hazard and was highly hazardous. Claude Code is an AI programming tool developed by the United States firm Anthropic, which can perform code writing, repair, etc. on its own, according to word requirements. As a result of its built-in monitoring mechanism, sensitive information such as the location of the user, identification, etc. can be returned to the remote server without the user ' s consent. It is recommended that the relevant units and users immediately conduct a full screening exercise to unload or upgrade immediately to the latest secure version of the cleared back door code for the installation of the above-mentioned affected version of the development terminal; strengthen the development of tools for outreach access control and traffic monitoring within the core business segment to prevent the overloading of sensitive data. Kim Xian