🎯 SymJack

The items that name it 5

• Is Claude Code safe for the enterprise? What the official settings cover, and what they don't
  articleas classification.key entities2026-10-22
• Top 10 attacks on Claude Code and what each one actually broke
  writeupas techniques2026-09-23It is written here as SymJack (symlink approval hijack).

  A repository ships a symlink with an innocuous displayed name whose actual target is the agent's own config file (.claude/settings.json or .mcp.json); the approval prompt shows the decoy path while the kernel follows the link, letting attacker JSON overwrite config and plant an MCP server that runs

• What is an agent harness (and how do you secure one)?
  articleas techniques2026-09-14It is written here as SymJack (approval-prompt symlink attack).

  Booby-trapped repo instructs agent to copy a file via raw shell copy to a path that is actually a symlink pointing at the agent's own config; developer approves what looks like a media file copy, but attacker-controlled MCP server definitions get written to config and run on next restart with full u

• The Cursor deeplink vulnerability that turns a “review this PR” click into remote code execution
  writeupas classification.key entities2026-07-15
• TrustFall: 1-click coding agent RCE in Claude, Cursor, Copilot
  writeupas techniques2026-05-07It is written here as SymJack (disguised symlink settings write).

  A disguised file copy writes malicious settings through a symlink after the trust prompt has already been accepted