Api-Key

Anthropic Ends Claude Subscription Access for OpenClaw — Pay-As-You-Go Only Starting April 4

If you woke up this morning to an email from Anthropic with the subject line reading something like “Important Update to Claude Subscriptions,” you’re not alone — and the news isn’t great for OpenClaw users. Starting April 4 at 12pm PT (3pm ET), Claude subscriptions will no longer cover usage on third-party tools, including OpenClaw. That means if you’ve been running OpenClaw on your Claude Pro or Max subscription, that arrangement ends today. ...

A glowing red padlock cracking open against a dark digital circuit board background, with data streams escaping through the gap

Claude Code Security Flaws Allow Remote Code Execution and API Key Exfiltration (Check Point Research)

If you use Claude Code in your development workflow, stop and read this before opening another repository. Check Point Research has disclosed two critical vulnerabilities — CVE-2026-21852 and CVE-2025-59536 — in Anthropic’s Claude Code agentic coding tool. The flaws allowed attackers to execute arbitrary code on a victim’s machine and exfiltrate API keys. The attack vector required only a malicious configuration file placed in a repository. The exploit triggered automatically — before the user saw or accepted the trust dialog. ...

Critical Claude Code Flaws Allow Remote Code Execution and API Key Theft

Stop what you’re doing and update Claude Code. Check Point Research disclosed two critical vulnerabilities today — CVE-2025-59536 and CVE-2026-21852 — that can let an attacker execute code on your machine and steal your Anthropic API key simply by having you clone and open a malicious repository. No additional interaction required. No suspicious files to download. Just opening the wrong repo is enough. What Was Disclosed Check Point Research published full technical details on both CVEs affecting Claude Code, Anthropic’s AI-powered coding assistant: ...