Claude Code Prompt-Injection Flaw Highlights AI Security Challenges as Chip Industry Draws Scrutiny

Anthropic’s Claude Code is a development environment that uses generative AI to help developers read and write code and operate tools. Prompt injection can override a user’s intent if the system mistakes text in a GitHub repository for trusted instructions. Microsoft said the flaw posed a significant risk because CI/CD systems often hold highly privileged credentials such as deployment keys and cloud tokens.

Microsoft security researchers recently disclosed that attackers could hide malicious prompts in GitHub content, inducing Claude Code to execute unintended commands and send CI/CD credentials to an external destination. Anthropic has patched the flaw. Users of version 2.1.128 and earlier are advised to upgrade immediately to reduce the risk of compromise to software supply chains and deployment environments.

Traditional static analysis relies heavily on existing rules, making it prone to missing contextual vulnerabilities involving business logic or access controls. Anthropic is using Claude to understand entire codebases in an effort to embed security reviews into development workflows. If companies cut spending on existing tools, the valuations of platform providers such as CrowdStrike and Palo Alto Networks, as well as financial institutions' procurement decisions, could be affected.

Anthropic launched a limited research preview of Claude Code Security for enterprise customers on February 20, 2026. Pricing was not disclosed, while open-source maintainers can apply for free access. Claude Opus 4.6 has identified more than 500 vulnerabilities. On February 23, CrowdStrike, Datadog and Zscaler fell about 11%, Fortinet and Okta dropped about 6%, and Palo Alto Networks declined 3%.

The cybersecurity industry has long relied on rules-based static analysis and manual reviews. Static tools struggle to detect contextual vulnerabilities involving business logic and access controls, while manual reviews are constrained by the supply of skilled professionals. Anthropic’s use of large language models to find vulnerabilities and draft patches could shift defenses from post-incident detection to the development stage. It is also prompting investors to reassess the pricing power and competitive barriers of traditional cybersecurity software.

Anthropic released a research preview of Claude Code Security on February 20, 2026. The tool can scan for vulnerabilities and propose patches that require human approval. On February 23, CrowdStrike, Datadog and Zscaler fell about 11%, while Fortinet and Okta dropped about 6%. CrowdStrike had lost 18% since the product’s release, wiping about $20 billion from its market value.