Claude Code Sessions Spawn Reverse Tunnels and LaunchAgent Persistence on macOS

Claude Code activity on a macOS developer machine has raised a difficult security question: when does convenient automation become a serious exposure? A new Elastic investigation found a session that opened reverse tunnels, sent login details to temporary public addresses, and created LaunchAgent entries that could survive logout or restart. The activity did not look […] The post Claude Code Sessions Spawn Reverse Tunnels and LaunchAgent Persistence on macOS appeared first on Cyber Security News.