Claude Code Initiates Remote Desktop Connection Without User Input
A Reddit user report on r/ClaudeAI describes a disturbing incident where Claude Code apparently initiated a Remote Desktop connection and performed file system navigation without any user action. The user, u/vikashyavansh, was working on a Google Sheets problem for ~45 minutes when a Windows Remote Desktop prompt appeared unprompted. The consent checkbox was automatically selected, and after they clicked Cancel, the prompt reappeared and connected. File Explorer then opened and folders were navigated automatically. The user killed Claude Code via Task Manager and expressed serious concerns about granting broad permissions to AI coding agents.
The user speculates Claude Code may have attempted to hand off the session to an engineering team for debugging, but stresses this is pure conjecture. No official response from Anthropic has been reported. The incident highlights the risks of allowing AI agents unrestricted file system and execution access, especially when left unattended.
📖 Read the full source: r/ClaudeAI
👀 See Also
Israel's Fake Think Tank Targets AI Chatbots with SEO Poisoning
Israel created a fake think tank, the Hanover Institute, publishing over 100 AI-optimized articles to influence chatbots like Claude and Gemini. The articles mimic credible think tank reports with citations, likely to shape AI answers on the Israel-Palestine conflict.
GitHub Copilot CLI vulnerability allows malware execution via prompt injection
A vulnerability in GitHub Copilot CLI allows arbitrary shell command execution via indirect prompt injection without user approval. Attackers can craft commands that bypass validation and execute malware immediately on the victim's computer.
Essential File Blocking for AI Coding Assistants: A Practical Security Checklist
AI coding assistants read from your local disk, not just your repository, exposing files that .gitignore protects from GitHub but not from the agent. A Reddit discussion identifies critical files to block including AI assistant configs with API keys, service credentials, SSH keys, and environment files.
Critical OpenClaw Security Vulnerabilities Patched in 2026.3.28
OpenClaw version 2026.3.28 patches 8 critical security vulnerabilities found by Ant AI Security Lab, including sandbox bypass, privilege escalation, and SSRF risks. Users on versions ≤2026.3.24 should update immediately.