Cxotoday2026-09-10 03:58:10

Watch Out! Your Claude Max Tokens May be Under Threat from Hackers

Imagine being a subscriber to Anthropic’s Claude Max and suddenly realising that despite not even wandering around your laptop and opening the app, token usage keeps mounting.

Summary

Turns out that a compromised Claude session key was being used to mint unauthorised Claude Code OAuth tokens.

claude codeappsaianthropicdaily newstokenscybersecurityhackers

This summary is a partial excerpt, the source's own feed cuts off here. Read the full story at Cxotoday for the rest.

KazaSec's take

Token and session-handling flaws like this are common precisely because they're easy to get subtly wrong, a token that never expires, a signature that isn't actually verified, a session that survives a password reset. They're also exactly the kind of issue a manual security review is built to catch.

Coverage details

Source: Cxotoday
Published: 2026-09-10 03:58:10
Author: raj n chandra shekhar
Category: technologytop

We've archived 903 other articles touching the same topic (claude code, apps, ai) , see the full security news archive.

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services