produced by Classmethod

# セキュリティ articles

サイバーセキュリティの基礎知識から最新動向、対策事例まで、セキュリティに関する実践的な情報を発信しています。組織のセキュリティ強化に役立つ知見が満載です。

Key Updates in Claude Code v2.1.317 - Changing Effort for Subagents on Different Models and Removal of Read Stubs

2026.11.03

GitHub Actions workflow lockfiles are now GA: Trying out how to prevent missed updates and forgotten onboarding with CI, Dependabot, and policies

2026.11.03

Enforcing SHA pinning for GitHub Actions via settings: testing what gets blocked, and whether tags can still pass with a lockfile

2026.11.02

Understanding How Node.js Brotli Decompression Vulnerability CVE-2026-111497 Works: Decompression Happens Even Without Writing It in Your Code

2026.11.02

I Enabled the AWS WAF SDK Automatic Integration for CloudFront and Checked the Script Tag Insertion into HTML and the Changes in Responses

2026.11.01

Key Updates in Claude Code v2.1.316 - Effort Specification for Subagents and Deprecation of Opus 4.8 Fast Mode

2026.10.31

I gave a presentation titled "Understanding from the Basics! How to Think About and Delegate AWS Security Operations"

2026.10.31

Trying Out the New "Approve for me" Feature in Kiro CLI V3: Which Operations Require Confirmation?

2026.10.30

Key Updates in Claude Code v2.1.314 - Denying Writes Outside the Working Directory and Fixing Gaps in Sandbox and Hook Enforcement

2026.10.30

Countermeasures against pwn requests: pull_request_target becomes permission-based starting December 2. Remaining attack paths and how to identify them

2026.10.30

Key Updates in Claude Code v2.1.312 - Using Shorter System Prompts with Inference Profile ARNs and More

2026.10.29

Claude Code v2.1.311 Major Updates - ultrathink's Upgrade to xhigh Effort and Changes to DISABLE_COMPACT

2026.10.27

Dependabot alerts REST API now allows you to directly retrieve dependency versions within a repository

2026.10.26

What We Learned from the OVHcloud CLI Release Replacement Incident: Tamper Protection for GitHub Releases - Immutable Releases and gh release verify-asset

2026.10.26

[Presentation Material] I talked about "Security Considerations for Development Environments in AI-Driven Development" #devio2026

2026.10.25

GitHub CLI tokens that had no expiration can now be set to expire and auto-renew within a few hours

2026.10.25

I gave a presentation titled "AI Features Utilized in AWS Security" at DevelopersIO 2026 TOKYO #devio2026

2026.10.24

Claude Code v2.1.310 Major Updates - Monitor Tool Support for Bedrock, Vertex, and Foundry, and Blocking of Long-Duration Sleep

2026.10.24

Reading Wiz CIRT's LLMjacking Report: The Flow of How a Google Cloud Billing Account Gets Hijacked and You End Up Paying for Someone Else's Gemini API Usage, and What to Check

2026.10.24

Claude Code v2.1.308 to v2.1.309 Key Updates - Mandatory Trust Confirmation for ultrareview and sed -i Behavior Changes

2026.10.23

The Story of Having Claude Code Check Supabase's Security Advisor and Build In App Protection

越井琢巳 (Koshii Takumi)

2026.10.22

Claude Code v2.1.307 Major Updates - Addition of safety_event and /claude-api api-version

2026.10.22

Claude Code v2.1.305 to v2.1.306 Key Updates - allowedMcpServers Behavior Change and Tool Search Regression Fix

2026.10.21

Major Updates in Claude Code v2.1.303 to v2.1.304 - Addition of Review Levels for Code Review and Fix for claude --worktree Deletion Without Confirmation

2026.10.20

Reading OpenAI's misalignment reports: How an internal model restricted to "GET only" exceeded its limits and how it was discovered

2026.10.18

Prevent secret commits with pre-commit and gitleaks

2026.10.17

Reading Anthropic's Self-Replicating AI Report: Can Small Models Self-Replicate Using IoT Devices as Scaffolding Without a Data Center?

2026.10.17

Reading Anthropic's Report on Countering Distillation Attacks: How Preserved Thinking Changes the Handling of Conversation History in the Claude API

2026.10.17

Verifying Claude Code's CVE-2026-86063 locally: git checkout prioritizes a branch of the same name over a commit SHA

2026.10.17

Trying out GitHub Actions workflow lockfiles: pinning dependencies to commits with actions.lock, and stopping before execution if they drift

2026.10.16

I tried out the new "/sandbox" feature of Kiro CLI, including communication restrictions between scripts and local MCP servers

2026.10.15

Verified whether prompt attacks on Claude Code on Bedrock can be blocked on the input side with account-level enforcement guardrails

2026.10.15

Major Updates in Claude Code v2.1.294~v2.1.295 - Addition of hooks onFailure: "block" and OSC 7501 Support

2026.10.09

Major Updates in Claude Code v2.1.290–v2.1.291 - Enhanced Bash Permission Checks and Change to WebSearch Quota Replenishment Method

2026.10.06

Key Updates in Claude Code v2.1.289 - Fix for Bash deny rules during sandbox auto-allow and teammate support for agent.spawn

2026.10.05

Claude Code v2.1.288 Major Updates - Added --max-findings to /code-review and Fixed Missing Dangerous rm Confirmation Detection Inside bash -c

2026.10.03