Information security
fromSecurityWeek
6 days agoClaude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking
Attackers can steal OAuth tokens from Claude Code through man-in-the-middle attacks by modifying configuration files and intercepting MCP traffic, gaining access to all connected tools and services.