Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-24 · source-backed
The June 24 release adds a sandbox.credentials setting that stops sandboxed commands from reading credential files and secret env vars, plus org-level model restrictions enforced through the picker, CLI flags, and env vars. Pair it with Anthropic's new Workload Identity Federation, which swaps static API keys for short-lived, scoped credentials issued per request via AWS IAM, GCP/Kubernetes service accounts, GitHub Actions, or Okta/OIDC (release notes). WIF kills the "static key to rotate or leak" problem outright. Both ship as direct hardening against the credential-exfiltration class hitting agentic tools. This is what a vendor responding to real attacks looks like.
Each link below shares sources, entities, or timing with this story.
Anthropic released Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude Code, CLI; cite the same source (June 24 release).
Claude Code uses MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Anthropic, Claude Code, Okta; cite the same source (release notes).
Anthropic released Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude Code, GitHub Actions; overlapping topics (action, anthropic, attack, class, claude).
Claude Code supports OTEL / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Claude Code supports OTEL); both cover Anthropic, Claude Code; cite the same source (June 24 release).
Claude Code supports AWS / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code supports AWS); both cover GCP, GitHub Actions, Kubernetes, OIDC; overlapping topics (action, attack, code).
Anthropic released Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude Code; cite the same source (June 24 release).
Claude Code uses Hugging Face / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses Hugging Face); both cover Anthropic, Claude Code; cite the same source (June 24 release).
Codex competes with Claude Code / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Codex competes with Claude Code); both cover Anthropic, Claude Code, CLI; overlapping topics (anthropic, claude, code).