Enterprise Projects Get Cost-Code Tags (Beta)
Eligible Enterprise organizations can now tag projects with codes, such as charge codes or client-matter numbers, and see Claude spend broken out by tag. It is in beta and landed Nov. 6 in the Claude release notes.
Finance and legal teams get cleaner chargebacks without spreadsheet gymnastics.
Personal Finance and Security Center Still Fresh
Last week's Personal Finance beta lets US Pro, Max and Ultra users link accounts through Plaid for read-only answers on balances, spending and bills. Anthropic also shipped Enterprise security and admin controls the same day.
No new announcements on the Anthropic newsroom since Oct. 28, so these remain the latest official moves.
Claude Code 2.1.319: Background MCP Tasks
The GitHub changelog lists MCP tasks running in the background in the terminal, a new permissions.denyInsteadOfPrompting setting, a CLAUDE_CODE_DISABLE_FEATURE_FLAGS variable, and auto-mode and gateway controls, plus many fixes.
The docs changelog page still tops out at 2.1.311 from Oct. 26, so GitHub is the place to look for the newest notes.
Opus 4.8 Fast Mode Goes Away Nov. 30
Fast mode for Claude Opus 4.8 is deprecated and gets removed Nov. 30, 2026. The release notes point to Opus 5.5 as the migration path. Put it on your calendar.
"Don't Ask Again" File Exposes Secrets in 1,122 Public Repos
Per The Hacker News, Apiiro found that choosing "Yes, and don't ask again" in Claude Code saves the approved command to .claude/settings.local.json. If that command contained a password or key, it sits in the file in plain text. Researchers counted 1,122 public copies on GitHub.
The advice: rotate any exposed secrets first. Deleting the file does not remove it from git history.
Malicious Extension Could Drive Claude Dispatch
The Hacker News reports Forever Security showed an extension running on claude.ai could send Dispatch instructions to Claude Desktop and run code on a user's computer. Anthropic reportedly said Dispatch would be retired, with a target of end of October.
Convenience Settings Are Attack Surface
Both security stories share a theme. A shortcut meant to cut friction became the path in. One saves secrets to disk, the other trusts a message from the browser.
If you use agents daily, audit your local config, gitignore settings.local.json, and keep secrets out of commands. Boring, fast, effective. A Hacker News essay this week also warned that AI-found vulnerabilities are about to flood defenders. Expect more of this, not less.