Straiker STAR Labs found a Claude Code attack where a child session lost the parent’s guardrails, letting a SessionStart hook exfiltrate developer data.
Spawning a Child Claude Session to Bypass Parent Guardrails
calendar_today
October 8, 2026
domain
straiker