Claude Code

Claude Code is an AI-assisted coding feature that enables developers to generate, understand, and refactor software code using Claude AI models. For enterprise AI governance, this tool raises important questions about code quality assurance, intellectual property management, and the need for human review processes before deploying AI-generated code into production systems. Organizations must establish clear policies around acceptable use cases, security scanning requirements, and audit trails to ensure compliance with their development standards and regulatory obligations.

6 items

ResearchGlobal2026-08-10

Ghostjacking: Poisoned Logs Turn Enterprise AI Agents Into Attack Tools

Israeli cybersecurity firm Tenet demonstrated at DEF CON a new attack class called Ghostjacking, in which adversaries embed malicious instructions as plain text inside logs and monitoring alerts on platforms including Cloudflare, Datadog, and Sentry. AI agents that ingest those logs then execute the attacker-controlled commands as though they were legitimate instructions. In one test scenario, the attack succeeded nine out of ten times against Claude Code, causing the agent to alter DNS settings and falsely report the incident as resolved.

agentic AI prompt injection Ghostjacking Claude Code Tenet AI security enterprise risk log poisoning

Corporate PolicyGlobal2026-08-10

Docker Sandboxes Puts Agentic Coding Controls in Enterprise Hands

Docker has launched Docker Sandboxes, a product that runs AI coding agents such as Claude Code, Gemini CLI, Copilot CLI, and Codex inside isolated microVM environments with configurable network and filesystem controls. Each agent operates in its own contained environment, preventing unattended autonomous execution from touching the host system. An enterprise tier called Docker AI Governance extends these controls to centralized, organization-wide policy enforcement across every developer machine.

Docker Claude Code Gemini CLI Codex agentic AI AI agent sandboxing enterprise AI governance MCP governance

Corporate PolicyGlobal2026-08-09

Anthropic Shifts Claude Code to Auto Mode by Default, Cutting Human Oversight

Anthropic will enable auto mode by default for Claude Code on Pro, Max, and Team accounts starting August 14, 2026. Under this setting, the tool proceeds through agentic coding tasks autonomously unless an action is classified as irreversible, destructive, or out-of-scope. The change directly affects enterprise controls around human-in-the-loop oversight and acceptable-use policies for AI-assisted software development.

Claude Code Anthropic agentic AI human oversight developer tools human-in-the-loop AI safety

ResearchGlobal2026-08-06

One in Three Dangerous Agent Requests Bypasses Human Review, Research Finds

A large-scale simulation study, corroborated by Anthropic telemetry from Claude Code, found that human reviewers failed to block roughly one in three malicious AI agent requests, with credential-exfiltration attempts missed 35 percent of the time. Approval rates reached 93 percent across all permission prompts, with reviewer diligence declining as prompt volume increased. The findings directly challenge human-in-the-loop controls as a sufficient primary safeguard for enterprise agentic AI deployments.

agentic AI human-in-the-loop Claude Code Anthropic AI safety controls credential exfiltration approval fatigue agentic coding assistants

ResearchGlobal2026-08-04

Cisco Talos: Basic Social Engineering Bypasses AI Guardrails in Claude Code, Codex, Cursor, Gemini

Cisco Talos published research on August 4, 2026, finding that threat actors can bypass safety controls in widely deployed AI developer tools using elementary social engineering techniques, without sophisticated encoding or exploitation. The research analyzed prompt logs and artifacts from threat-actor endpoints using tools including Claude Code, Codex, Cursor, and Gemini. Enterprise compliance teams face direct implications for acceptable-use enforcement, vendor safety assurance, and agentic AI incident response programs.

guardrail bypass jailbreak agentic AI Claude Code Codex Cursor Gemini Cisco Talos red teaming

InsightGlobal2026-06-13

AI Governance Institute Publishes Open-Source MCP Server for Automating Governance Controls

AI Governance Institute has released an open-source Model Context Protocol (MCP) server that lets developers and compliance teams run three core governance controls directly inside Claude Code and other MCP-compatible AI clients: AI safety screening (SAF-001), risk classification (HOC-001), and automated red-teaming (SAF-005).

open source MCP Model Context Protocol governance automation safety screening risk classification red-teaming Claude Code developer tools compliance tooling