Tuesday, June 9, 2026

The Boot War: What Linux - Windows Users Need to Know about Firmware and Secure Boot


The EXODUS: Windows Secure Boot Kills Linux on June 24th! - YouTube

Linux  ·  Security  ·  UEFI Secure Boot

What Every Linux User Must Know Before June 27, 2026

A guide to the Microsoft Secure Boot crisis — from the SBAT disaster of August 2024 to the certificate expiration looming now — and exactly what you need to do to protect your system.

Picture this: it is a Tuesday morning. You sit down at the machine you built, the one where you spent a weekend installing Fedora or Ubuntu. You press the power button. Instead of your familiar boot screen, you see a stark message in white text on black:

"Verifying shim SBAT data failed: Security Policy Violation. Something has gone seriously wrong: SBAT self-check failed."

The machine shuts itself off. Your files are still there. Your operating system is still installed. But the firmware — the code that runs before any operating system — refuses to let it start. This is not hypothetical. This is exactly what happened to tens of thousands of dual-boot Linux users in August 2024. And a second, larger crisis is now unfolding in June 2026.

Part I: Understanding the Architecture — A Brief Tutorial

To understand what is happening, you need to understand a small slice of how a modern computer actually starts. When you press the power button, the very first code that runs is not Linux or Windows. It is the UEFI firmware — a program baked into chips on your motherboard by the manufacturer.

In the early 2010s, the UEFI Consortium introduced a feature called Secure Boot. The stated purpose was legitimate: prevent malware from inserting itself into the boot process before any operating system loads — a particularly vicious class of attack called a bootkit or rootkit. Secure Boot addresses this by requiring that every piece of software in the boot chain carry a valid cryptographic signature. If the firmware does not recognize the signature, the software does not run.

"Secure Boot is a UEFI firmware security feature that ensures only immutable and signed software are loaded during boot time." — Ubuntu Security Documentation

This is sound security engineering. The problem — the one that critics raised loudly in 2012 when Secure Boot was first mandated for Windows 8 hardware certification, and that has never gone away — is the question of who controls the keys.

The Microsoft Certificate Authority

On the overwhelming majority of personal computers sold in the world, the institution that manages the root of trust is Microsoft. Hardware manufacturers ship machines with Microsoft's certificates pre-enrolled in the firmware. Anything signed by Microsoft's certificate authority will boot. Anything not signed by it will not.

For Linux, this created an immediate problem. Canonical, Red Hat, and other distribution vendors are not Microsoft. Their bootloaders are not signed by Microsoft. The engineering solution the community invented is called shim.

How Shim Works

Shim is a thin, minimal first-stage bootloader. It carries a Microsoft signature, so the firmware accepts it. Shim then loads the actual Linux bootloader — typically GRUB — using Linux's own distribution-specific keys embedded inside shim itself. Ubuntu's shim uses Canonical's key; Red Hat's shim uses Red Hat's key. The chain looks like this:

UEFI Firmware (trusts Microsoft CA)
    └── Shim (signed by Microsoft CA)
          └── GRUB (signed by distro key embedded in Shim)
                └── Linux Kernel (signed by distro key)

This architecture worked — imperfectly, with constant maintenance overhead — for over a decade. Then two events broke it: one in August 2024, and one approaching now.


Part II: The August 2024 Disaster — What Happened and Why

On August 13, 2024, Microsoft released a security update — KB5041585 for Windows 11 — intended to block older, vulnerable bootloaders by implementing a technology called SBAT: Secure Boot Advanced Targeting.

SBAT is actually an open-source community invention. Unlike the older DBX blacklist (a database of banned UEFI executables that has a hard size limit), SBAT uses a lightweight metadata system embedded in bootloader binaries that allows specific component versions to be revoked without burning through the limited DBX space. Linux distributions were already using SBAT to revoke their own vulnerable bootloader versions.

Microsoft's August 2024 update applied an SBAT revocation list to Windows machines. The stated goal: block shim versions with known security vulnerabilities related to the BlackLotus UEFI bootkit (CVE-2023-24932). Microsoft's own documentation said the update would not be applied to dual-boot systems.

⚠ What Actually Happened

The dual-boot detection logic failed. On a significant number of systems running both Windows and Linux, the SBAT revocation list was applied even though Linux was present. The firmware then refused to load the now-revoked shim versions. Dual-boot users booted into Windows one day, and the next morning found that Linux would not start — displaying the error: "Verifying shim SBAT data failed: Security Policy Violation."

Affected distributions included Ubuntu, Debian, Linux Mint, and others. Users who had never heard the phrase "Secure Boot" suddenly found themselves in a technical nightmare not of their making. Microsoft responded within days with a workaround involving registry edits, but the underlying fix — corrected detection logic — was not released until May 13, 2025, nine months after the original incident.

"This issue was resolved by Windows updates released May 13, 2025 [...]. We recommend you install the latest update for your device as it contains important improvements and issue resolutions, including this one." — Microsoft Windows Release Health Dashboard

The episode revealed two structural problems that go beyond the specific bug. First, a decision made by one company — pushed silently through an automated update mechanism — could render the Linux installations of tens of thousands of people non-functional overnight. Second, the communication gap was severe: users learned about the problem from error messages, not from advance notice.


Part III: The June 2026 Crisis — Certificates That Are Expiring Right Now

The 2024 SBAT incident was a bug — an unintended consequence of detection logic that failed. The 2026 situation is something different: a planned infrastructure event that has been in motion since 2023 and is now reaching its critical phase.

The Microsoft certificates that underpin Secure Boot for nearly all personal computers sold since 2012 were originally issued in 2011. They are expiring.

JUNE 24, 2026

Microsoft Corporation KEK CA 2011 — Expires

The Key Exchange Key certificate is the credential that authorizes Windows Update to push new entries to the Secure Boot allow list (DB) and deny list (DBX). When this expires, no new revocations can reach the device through the standard update pathway. Systems keep booting, but their Secure Boot posture becomes frozen — unable to receive future security updates at the firmware level.

JUNE 27, 2026

Microsoft Corporation UEFI CA 2011 — Expires

This is the certificate that signs third-party bootloaders — including Linux shim. After expiration, Microsoft can no longer sign new shim binaries with this key. New shim versions, signed only with the old key, will not be usable on machines that have already transitioned to the 2023 certificates. Linux installation media that ships outdated shim may fail to boot on updated systems.

OCTOBER 19, 2026

Microsoft Windows Production PCA 2011 — Expires

This certificate signs the Windows bootloader itself. This is Microsoft's own problem to solve, and it will — but the expiration underscores that the entire 2011-era Secure Boot infrastructure is being retired simultaneously.

Critical Clarification: Will Your Machine Become a Brick on June 27?

✓ Important: No, your machine will not stop booting

Secure Boot firmware does not enforce certificate expiration dates at boot time. The firmware has no reliable way to verify the hardware clock during the boot sequence, so it does not check whether a certificate has passed its expiration date. Machines using existing, already-installed shim binaries signed with the 2011 key will continue to boot after June 27, 2026. What expires is Microsoft's ability to sign new binaries with the old key — not the validity of already-installed software.

What the expiration does affect, immediately and concretely:

New installations. If you try to install a Linux distribution after the transition using installation media containing an old shim, on a system that has already enrolled the 2023 certificates and revoked the 2011 chain, the installer will fail to boot. This is the scenario most likely to affect ordinary users in the months ahead.

Frozen security posture. On machines that do not receive the 2023 KEK certificate, the Secure Boot deny list (DBX) cannot be updated. Future bootkit vulnerabilities — the kind of attack Secure Boot was designed to block — cannot be revoked on these machines. The machine keeps booting, but its boot-level security is now static.

Legacy hardware. Older machines that cannot receive OEM firmware updates containing the 2023 certificates face a genuine long-term problem. Their hardware may eventually be unable to boot newly signed software from any vendor.


Part IV: Who Is Affected and How — Your Situation

Your Setup Risk Level Primary Concern
Linux only, modern hardware, Secure Boot on Action Needed Update shim to dual-signed version before your distro transitions to 2023-only signing
Linux only, Secure Boot disabled Lower Risk No immediate boot failure; monitor your distro's advisories
Dual-boot Windows + Linux, Windows up to date (May 2025+ patches) Action Needed Update Linux shim; the 2024 SBAT bug is fixed but certificate transition still requires attention
Dual-boot, Windows not updated since August 2024 Urgent Apply May 2025 Windows patches first; then update Linux shim
Legacy hardware (pre-2015), no OEM firmware updates available Urgent You may not be able to enroll the 2023 certs; plan ahead (see Step 6)
Windows only, considering trying Linux Aware Download fresh installation media — do not use ISOs older than early 2026

Major Distribution Status

Every major Linux distribution has issued formal advisories. The situation as of June 2026:

DistributionStatusAction
Red Hat Enterprise Linux 9 / 10UpdatedNew dual-signed shim released May 2026. Run dnf update shim-x64
Red Hat Enterprise Linux 8UpdatedUpdate released June 2026. Run dnf update shim-x64
Ubuntu 22.04 LTS / 24.04 LTSUpdatedRun sudo apt update && sudo apt upgrade shim-signed
Fedora 39 / 40 / 41UpdatedRun sudo dnf update shim-x64
Debian 12 (Bookworm)UpdatedRun sudo apt update && sudo apt upgrade shim-signed
Linux Mint 21.xUpdatedUpdate through Update Manager; ensure shim-signed is current
Rocky Linux / AlmaLinuxIn ProgressCheck official advisories; CIQ is shipping dual-signed shim for Rocky
Arch Linux / ManjaroCheck RequiredArch uses a different boot setup; consult the Arch Wiki Secure Boot page
Older / unmaintained distrosVulnerableConsider migrating to a supported release

Part V: The Step-by-Step Action Plan

Work through these steps in order. Each one builds on the last. If you get stuck, the Linux community forums have distribution-specific threads for every scenario described below.

1 Check Your Current Secure Boot Status

Open a terminal and run:

mokutil --sb-state

This tells you whether Secure Boot is active on your system. If it reports SecureBoot enabled, the steps below are essential. If it reports disabled, you have more flexibility but should still update your shim for future-proofing.

On a dual-boot system, also check whether the 2024 SBAT issue affected you. Boot into Linux. If you cannot, skip to Step 7 (Recovery).

2 Back Up Everything — Right Now, Before Anything Else

This step is non-negotiable. Certificate and bootloader operations touch the deepest layers of your system. A mistake can leave a machine that will not start. An external backup means the worst case is hours of recovery time, not lost data.

The simplest approach for most users:

sudo apt install clonezilla   # Debian/Ubuntu
# Or use your distro's equivalent

Alternatively, boot a live USB of your distribution and use Clonezilla or GParted to image your Linux partition to an external drive. Store that drive somewhere physically separate from the machine. Do this before running any updates in the steps below.

3 Update Your Shim Package

This is the single most important technical action. Install the updated shim — dual-signed with both the 2011 and 2023 Microsoft certificates — so your system can boot regardless of which certificate set your firmware trusts.

Debian / Ubuntu / Linux Mint:

sudo apt update
sudo apt upgrade shim-signed grub-efi-amd64-signed

Fedora / Red Hat / CentOS Stream / AlmaLinux:

sudo dnf update shim-x64 grub2-efi-x64

Arch Linux: Arch does not use the standard shim approach. Consult the Arch Wiki page on Unified Extensible Firmware Interface for the sbctl-based workflow appropriate to your setup.

After updating, verify the installed shim version:

rpm -q shim-x64            # On RPM-based systems
dpkg -l | grep shim-signed # On Debian-based systems
4 If on Dual-Boot: Apply Windows May 2025 Updates First

If you are running Windows alongside Linux and you have not applied Windows updates since before August 2024, do this before anything else:

Boot into Windows → Settings → Windows Update → Check for Updates. Install all available updates, specifically ensuring you have the May 2025 Patch Tuesday update (KB5058405 for Windows 11). This fixes the detection logic that caused the 2024 SBAT incident. Without this fix, updating Windows in the future could re-trigger the problem.

After Windows is fully patched, boot back into Linux and proceed with Step 3.

5 Update the 2023 Certificates via fwupd (If Supported)

If your hardware supports firmware updates through the Linux Vendor Firmware Service (LVFS), you can enroll the new 2023 Microsoft certificates directly from Linux:

sudo fwupdmgr get-updates
sudo fwupdmgr update

Not all hardware supports this. Check first:

fwupdmgr get-devices

If your device appears in the list with available updates, proceed. If not, check your OEM's website for a BIOS/UEFI firmware update that includes the 2023 certificate set. This is especially important for older machines that do not receive automatic certificate updates through Windows Update.

6 For Older Hardware: Consider Enrolling Your Own Machine Owner Key

If your hardware is old enough that OEM firmware updates are unavailable, and you cannot enroll the 2023 Microsoft certificates through any automated pathway, you have a more technically demanding but fully workable option: enroll your own Machine Owner Key (MOK) and sign your bootloader with it.

# Generate a key pair (run this once)
openssl req -newkey rsa:2048 -nodes -keyout MOK.key \
  -new -x509 -sha256 -days 3650 -subj "/CN=My MOK Key/" \
  -out MOK.crt

# Convert to DER format
openssl x509 -outform DER -in MOK.crt -out MOK.cer

# Enroll in firmware (requires reboot to confirm in MokManager)
mokutil --import MOK.cer

You will be prompted to set a one-time password. On next reboot, a blue MokManager screen will appear asking you to confirm enrollment. After confirmation, your key is enrolled in the firmware's trusted key database. Detailed instructions are on the Arch Wiki (Unified Extensible Firmware Interface / Secure Boot) and Ubuntu community documentation.

7 Last Resort: Disable Secure Boot (and What That Actually Means)

Disabling Secure Boot is not the catastrophe that its name implies for most personal computer users. The practical security impact is modest for home machines: you lose protection against a class of sophisticated bootkit attacks that require physical or deep OS-level access to execute in the first place.

To disable Secure Boot, restart your machine and enter the UEFI firmware setup. The key to press during startup varies by manufacturer: usually F2, F12, Delete, or Escape. Navigate to the Security or Boot section. Set Secure Boot to Disabled. Save and exit.

Linux will boot normally without any shim verification chain. Note this does not protect against the revocation-related boot failures in the same way — it simply bypasses the entire verification system. If you are in a high-security enterprise environment, consult your security team before proceeding.

8 If Your System Already Will Not Boot: Recovery from Live USB

If you are reading this after the fact and your Linux installation will not start, do not panic. Your data is still there. Use this recovery path:

a. Download a fresh ISO of your Linux distribution from its official website. Verify the checksum. Write it to a USB drive using Balena Etcher, Rufus (on Windows), or dd.

b. Boot from the USB drive. You may need to enter your UEFI firmware (F2/F12/Delete at startup) and temporarily change the boot order, or disable Secure Boot if the live USB itself fails to boot due to the same certificate issues.

c. From the live environment, mount your installed Linux partition:

sudo mount /dev/sdaX /mnt         # replace sdaX with your partition
sudo mount --bind /dev /mnt/dev
sudo mount --bind /proc /mnt/proc
sudo mount --bind /sys /mnt/sys
sudo chroot /mnt

d. Update the shim package from within the chroot (use the appropriate package manager command from Step 3). Exit the chroot and reboot.

Distribution-specific recovery guides will be posted on official forums for every major distribution affected. You will not be navigating this alone.


Part VI: The Structural Problem — What This Really Means

The technical steps above solve the immediate problem. But the events of 2024 and 2026 together illuminate something deeper about the architecture of trust in personal computing.

Secure Boot, as implemented on modern PC hardware, answers the question of what software your computer is permitted to run by routing that decision through a single corporate certificate authority: Microsoft. When Microsoft makes a change to that infrastructure — even a change made for legitimate security reasons — the consequences propagate to tens of millions of machines simultaneously, including machines running operating systems Microsoft does not control and did not consider in its planning.

"The architectural change worth calling out is the split of the old monolithic Microsoft UEFI CA 2011 into two distinct 2023 certificates. One signs OS bootloaders (Linux shim). The other signs third-party option ROMs. The split is a real security improvement — but it is being executed on a timeline and communication cadence that serves Windows users first." — Eclypsium Security Research, June 2026

The 2024 SBAT incident was not malicious. It was a bug in detection logic. But a bug that can brick tens of thousands of Linux installations with a single patch deployment is a bug that is only possible because of this architectural centralization.

The 2026 certificate expiration is not a bug. It is planned infrastructure maintenance. Red Hat, Ubuntu, and other major distributors have responded professionally — releasing dual-signed shim updates in advance, publishing clear advisories, coordinating with Microsoft's timeline. The system is working, in the narrow sense that the people who know what they are doing are handling it. The system is failing, in the broader sense, for ordinary users who do not follow firmware specification mailing lists and who will encounter problems during new installations for months after the transition.

The Long View: What Better Looks Like

Projects like coreboot and Libreboot represent an alternative architecture: community-controlled firmware that does not route the root of trust through any single corporate certificate authority. They remain technically demanding to deploy. But the concrete demonstrations of 2024 and 2026 — weeks of unbootable machines, nine months to ship a fix, cascading confusion for ordinary users — are precisely the kind of events that turn niche projects into mainstream necessities.

The Open Platform Firmware Foundation and the work being done at the firmware level by organizations like 9elements, 3mdeb, and others point toward a future where the answer to "who controls whether my computer starts" is "you do." That future is not here yet. But it is worth knowing it exists, and worth supporting the work that makes it possible.


Sources and Formal Citations

  1. Microsoft Windows Release Health. Known Issue: Linux fails to boot after August 2024 SBAT update. Resolved May 13, 2025. (KB5058405 / KB5041585 / KB5041571 / KB5041580.)
    https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-23h2
  2. Bleeping Computer. "Microsoft fixes Linux boot issues on dual-boot Windows systems." May 14, 2025.
    https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-linux-boot-issues-on-dual-boot-windows-systems/
  3. GamingOnLinux. "Microsoft finally solve the Linux dual-boot issue after 9 months." May 19, 2025.
    https://www.gamingonlinux.com/2025/05/microsoft-finally-solve-the-linux-dual-boot-issue-after-9-months/
  4. Techzine Global. "Windows patch prevents Linux from booting on dual-boot systems." August 21, 2024.
    https://www.techzine.eu/news/devices/123609/windows-patch-prevents-linux-from-booting-on-dual-boot-systems/
  5. Heise Online. "Microsoft extends workaround for Windows SBAT update." August 26, 2024.
    https://www.heise.de/en/news/Microsoft-extends-workaround-for-Windows-SBAT-update-9848078.html
  6. linuxsecurity.com. "Windows Update Fixes Linux Dual-Boot Boot Issues." May 15, 2025.
    https://linuxsecurity.com/news/vendors-products/windows-update-fixes-linux-dual-boot-boot-issues
  7. Red Hat Customer Portal. "Secure Boot Certificate Changes in 2026: Guidance for RHEL Environments." Updated May–June 2026.
    https://access.redhat.com/articles/7128933
  8. Red Hat Developer Blog. "Secure Boot certificate changes in 2026: Guidance for RHEL environments." February 4, 2026.
    https://developers.redhat.com/articles/2026/02/04/secure-boot-certificate-changes-2026-guidance-rhel-environments
  9. Microsoft Tech Community. "Secure Boot playbook for certificates expiring in 2026." May–June 2026.
    https://techcommunity.microsoft.com/blog/windows-itpro-blog/secure-boot-playbook-for-certificates-expiring-in-2026/4469235
  10. Eclypsium. "Microsoft Secure Boot Certificates Expire 2026: Enterprise Impact." June 2026.
    https://eclypsium.com/blog/microsoft-secure-boot-certificates-expire-2026/
  11. CIQ. "No, your Secure Boot certificate is not expiring in June." June 2026.
    https://ciq.com/blog/secure-boot-uefi-ca-key-rotation-2026
  12. LWN.net. "Linux and Secure Boot certificate expiration." July 16, 2025.
    https://lwn.net/Articles/1029767/
  13. Ubuntu Security Documentation. "UEFI Secure Boot." Updated January 22, 2026.
    https://documentation.ubuntu.com/security/security-features/platform-protections/secure-boot/
  14. University of Wisconsin–Madison DoIT. "Microsoft Secure Boot Certificate Expiration 2026." 2026.
    https://kb.wisc.edu/159935
  15. Google Cloud Documentation. "Microsoft Secure Boot certificate expiration — Compute Engine Shielded VMs." 2026.
    https://docs.cloud.google.com/compute/docs/security/ms-secure-boot-certificates-expiration
  16. AskWoody Forums. "Act now: Secure Boot certificates expire in June 2026." June 2026.
    https://www.askwoody.com/forums/topic/act-now-secure-boot-certificates-expire-in-june-2026/
  17. Windows Forum. "Secure Boot 2011 KEK CA Expiration: June 2026 Migration Risks for Windows and Linux." June 2026.
    https://windowsforum.com/threads/secure-boot-2011-kek-ca-expiration-june-2026-migration-risks-for-windows-linux.422139/
  18. Proxmox Support Forum. "UEFI 2011 certificates expire in June 2026!" June 2026.
    https://forum.proxmox.com/threads/uefi-2011-certificates-expire-in-june-2026.183799/
This article synthesizes reporting, official advisories, and community research current as of June 2026. Technical details in the Secure Boot ecosystem change rapidly; always verify against your distribution's official documentation.

 

Sunday, April 12, 2026

Claude Code:

 

The Terminal Agent That Became a Billion-Dollar Problem—And How to Use It Safely

BLUF: Anthropic's Claude Code—launched as a research preview in February 2025 and general availability in May 2025—has become an industry-transforming but security-critical tool. The terminal-native agent reached $1 billion in annualized revenue within six months and may approach $2 billion by early 2026. A March 2026 source code leak exposed 513,000 lines of TypeScript, amplifying known vulnerabilities (CVE-2025-59536, CVE-2026-21852) and spawning malicious repositories. Security best practices emphasize permission boundaries, MCP server vetting, credential isolation, and zero-trust configuration—but success depends on understanding Claude Code as a "brilliant but untrusted intern" with your shell permissions.

The Rise of Agentic Development

When Anthropic quietly launched Claude Code in February 2025, few predicted it would redefine the software development landscape within months. Unlike GitHub Copilot's autocomplete suggestions or traditional IDE plugins, Claude Code runs as a standalone terminal agent—reading your codebase, executing bash commands, modifying files across projects, and pushing to Git repositories without human intervention between each step.

By May 2025, the tool reached general availability alongside Claude 4. Engineers reported a 50% productivity boost, with teams adopting it across major corporations. Stripe deployed the tool to 1,370 engineers. Microsoft reportedly integrated it across major engineering teams. One Google principal engineer at a January 2026 Seattle meetup noted that Claude replicated a year of architectural work in a single hour.

The revenue trajectory tells the story of adoption velocity: $1 billion annualized run rate achieved by November 2025, with analyst estimates suggesting $2 billion by January 2026. Anthropic's overall revenue jumped from roughly $1 billion at the start of 2025 to $5 billion by August, driven substantially by Claude Code's enterprise adoption curve.

Fundamental Architecture: Claude Code operates at the project level, not the token level. It reads the full codebase, plans a sequence of actions across multiple files, executes them using real development tools (bash, git, test runners), evaluates results, and iterates independently. The developer defines the goal and retains control over what ships, but the execution loop runs autonomously.

The March 2026 Source Code Leak: What Happened

On March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code through a JavaScript source map (.map) file in the public npm package @anthropic-ai/claude-code version 2.1.88. The 59.8 MB file contained approximately 513,000 lines of unobfuscated TypeScript across 1,906 files, revealing the complete client-side agent harness.

Security researcher Chaofan Shou (@Fried_rice) disclosed the leak publicly on X, triggering immediate viral spread. Within hours, the codebase was downloaded from Anthropic's Cloudflare R2 bucket, mirrored to GitHub, and forked tens of thousands of times. Threat actors gained full visibility into:

  • Hook execution logic and permission bypass patterns
  • MCP server integration points and trust boundaries
  • API key handling and environment variable parsing
  • Sandbox escape vectors and privilege escalation paths

The leak coincided exactly with a separate malicious Axios npm supply chain attack (RATs published March 31, 00:21–03:29 UTC), creating what security researchers called "a perfect storm for anyone updating Claude Code via npm that day." Zscaler's ThreatLabz team documented malicious GitHub repositories using leaked source code as lures, with ".7z" archives claiming to contain "unlocked enterprise features and no message limits."

Known Vulnerabilities: CVEs in the Wild

Prior to the leak, Anthropic patched two critical vulnerabilities discovered by Check Point Research and reported between July and December 2025:

CVE ID CVSS Score Impact Attack Vector Patched
CVE-2025-59536 8.7 Remote Code Execution Project-contained code execution before trust dialog Before Feb 2026 publication
CVE-2026-21852 8.9 API Key Exfiltration ANTHROPIC_BASE_URL override redirecting traffic Before Feb 2026 publication
CVE-2025-55284 7.2 DNS Exfiltration API key theft via DNS side-channel Version-specific

The threat model is straightforward: an attacker crafts a malicious repository with poisoned `.claude/` config files, hooks, or `.mcp.json` settings. When a developer clones the repo and opens Claude Code, malicious hooks trigger arbitrary shell execution or credential theft—sometimes before the trust dialog is confirmed. The vulnerability surface expanded dramatically post-leak, as threat actors gained source visibility to identify precise exploitation paths.

The Resource Bible: Extracted Claude Code Guidelines

The Claude Code Resource Bible image you provided consolidates essential references across six categories. Here's what the landscape includes:

Official Documentation & Architecture

  • Official Docs: Complete CLI documentation and architecture guides
  • Partner Network: Anthropic's enterprise adoption program
  • Certification: Claude Certified Architect pathway
  • MCP Server Repo: Official Model Context Protocol servers

MCP Servers: The Integration Layer

The Model Context Protocol enables Claude Code to interact with external systems—GitHub, Slack, databases, APIs. The resource guide catalogs 15+ official MCP servers, but this is where security hinges. Each MCP server is a potential exfiltration vector:

MCP Server Security Checklist:
  • Vet every MCP server before enabling—verify source origin
  • Store allowed servers in `.mcp.json` under source control
  • Use deny-lists aggressively to block risky integrations
  • Never auto-approve servers on session start
  • Monitor MCP tool result sizes to prevent truncation bypasses
  • Verify that Postgres, Slack, GitHub, and Firewall MCP servers are up-to-date

Terminal Multiplexers & Agent Frameworks

Advanced configurations include tmux, GNU screen, and custom agent orchestration via the Claude Agent SDK. Teams delegate specialized subtasks through subagents—frontend development while the main agent builds a backend API in parallel. The new Checkpoints feature lets you maintain control over delegated work.

Automation & Infrastructure

Recent releases introduced hooks (PreToolUse, PostToolUse), background tasks, and scheduled execution. Hooks are pattern-matching shell scripts that intercept Claude Code actions before execution. They are not a security boundary—they are guardrails, not walls. Sophisticated prompt injection can still escape them, but they provide meaningful defense-in-depth.

Security Best Practices: The Hard-Won Lessons

1. Default to Cautious Permission Mode

Claude Code's default is read-only. When additional actions are needed (editing files, running commands, executing bash), it requests explicit permission. You control whether to approve actions once or automatically per-session. Never enable auto-mode by default across your fleet. Auto-mode is research preview for good reason.

# Launch Claude Code in cautious mode (default) claude # Opt-in to auto-mode research preview (not recommended for prod) claude --enable-auto-mode # Check current mode /mode

2. Enforce Sandbox Boundaries

Claude Code can only write to the folder where it was started and its subfolders. It cannot modify files in parent directories without explicit permission. However, it can read files outside the working directory—a necessary design for accessing system libraries and dependencies. This creates an asymmetry: read operations are broad, write operations are confined.

Sandbox Configuration: Use `/sandbox` to define explicit boundaries where Claude Code can work autonomously. Specify filesystem and network isolation explicitly.

3. Credential Hygiene: The Critical Gap

Claude Code processes context and code through Anthropic servers via TLS. Without proper configuration, it can read `.env` files, SSH keys, AWS credentials, and GitHub tokens. Researchers identified that AI agents leak credential-like strings from context windows at scale. Several hardening frameworks recommend:

  • Credential Scrubbing Hooks: Strip credential patterns from transcripts and snapshots
  • Transcript Retention Limits: Keep retention to 7–14 days, not indefinite
  • API Key Proxy: Use scoped credentials inside sandboxes, translated to your actual GitHub token
  • Environment Variable Isolation: Never export secrets directly; use credential helpers
  • PreToolUse Hooks: Block pipe-to-shell, destructive deletes, and permission bypass flags before execution

4. Repo-Controlled Configuration as a Trust Boundary

Your Claude Code project settings live in `.claude/` and MCP servers in `.mcp.json`—both checked into source control. This design enables team consistency but introduces a critical attack surface. Anthropic's own documentation assumes these files are guarded by a trust boundary. They are exactly what attackers will poison.

Repository Security:
  • Never accept pull requests that modify `.claude/` or `.mcp.json` without manual review
  • Use branch protection rules to require code owner approval for config changes
  • Scan for invisible Unicode in config files (CVE disclosure included hidden characters)
  • Disable all hooks by default; enable only explicitly safe hooks

5. Privilege Escalation Prevention

Do not run your daily workstation as an admin user. If your account has admin privileges during normal operations, every process you launch—including Claude Code and all subagents—inherits those elevated permissions. A prompt injection that would be contained under a standard user becomes a full system compromise under admin. Log in as a standard user. Elevate with sudo only when necessary.

6. Supply Chain Protection

Claude Code can manage dependencies, add npm packages, and run lifecycle scripts. Attackers exploiting tools like Claude Code can introduce trojanized packages with postinstall scripts that exfiltrate credentials. Implement:

  • Package scanning before installation (Software Composition Analysis)
  • Lifecycle script lockdown—prevent npm scripts from running silently
  • CVE auditing with automated blocking of known vulnerable versions
  • Network isolation for package downloads (use internal registries where possible)

7. Code Review & Human Oversight

Developer surveys show engineers delegate only 0–20% of work fully to Claude Code; the rest requires human review. Teams with strong test-driven development practices see the greatest benefits. Organizations using agents as shortcuts to skip security review struggle significantly.

Governance Pattern: Treat Claude Code as a "brilliant but untrusted intern"—capable of excellent work but requiring human review of all security-critical changes. Require approval for code touching authentication, encryption, credential handling, or database schema changes.

Advanced Hardening: Seven Phases of Defense

Recent research by Tim McAllister (February 2026) codified a seven-phase hardening framework implemented through Claude Code itself—using the agent to audit and secure its own environment:

  1. Security Assessment: Inventory current state: processes, MCP servers, credentials, permissions, endpoint protections
  2. Pre-Execution Gate: PreToolUse hook blocking dangerous commands before execution (pipe-to-shell, destructive deletes, credential exfiltration patterns, permission bypass flags)
  3. Supply Chain Protection: Package scanning, lifecycle script lockdown, CVE auditing
  4. File-Level Malware Scanning: ClamAV integration with automated definition updates and scheduled scans
  5. Credential Hygiene: Transcript scrubbing, snapshot pruning, credential removal from config files
  6. Hook Compliance Verification: Confirm hooks execute as expected and log all pre-execution gates
  7. Maintenance Scheduling: Document protections mapped to attack vectors, maintenance schedule, version verification procedures

Each phase stands independently and requires explicit approval before making changes. The output is a comprehensive security document mapping protections to known attack vectors.

Governance at Scale: Enterprise Configuration

For organizations deploying Claude Code across hundreds of engineers, Anthropic provides enterprise-grade controls:

Managed Settings & Policy Enforcement

managed-settings.json enables organization-wide policies that cannot be overridden by individual developers. Policies can enforce:

  • Permission modes (cautious vs. auto)
  • Allowed MCP servers at the org level
  • Sandbox boundaries and isolation requirements
  • Audit logging and transcript retention periods
  • Forbidden commands and file patterns

Audit Logging & Compliance

Enterprise organizations can export audit logs (metadata-based; chat/project titles and content are not included in exports). SOC 2 Type II certification is available under NDA. However, organizations must still run their own access management and vendor-risk controls—Anthropic's compliance certifications are necessary but not sufficient.

Zero-Data-Retention (ZDR) Mode

For processing PHI (Protected Health Information) or other regulated data, Claude Code offers ZDR mode (requires Enterprise plan addendum). ZDR prevents code and context from being retained on Anthropic servers beyond inference time.

Network Isolation via Cloud Providers

Deploying Claude Code via AWS Bedrock or Google Vertex AI improves network control—traffic avoids the public internet while still using managed cloud services. Organizations concerned about data residency or network exfiltration should evaluate these deployment models.

The Open-Source Security Response: Claude Secure Coding Rules

The community has begun encoding security expertise as declarative rules. The Claude Secure Coding Rules project (GitHub: TikiTribe/claude-secure-coding-rules) provides 100+ open-source rule sets covering OWASP, AI/ML, RAG, Infrastructure-as-Code, containers, and CI/CD. Rules are organized hierarchically:

Level Scope Override Priority Purpose
Project-level Entire codebase Highest Org-wide security policies
Directory-level Specific directories Medium Domain-specific constraints (e.g., FinTech)
Global defaults Fallback rules Lowest Framework-level best practices

Rules are also tiered by enforcement:

  • Strict: Claude Code refuses to generate the code
  • Warning: Claude Code generates it but flags the risk
  • Info: Informational guidance, no blocking

What Success Looks Like: Adoption Patterns

Organizations realizing the greatest productivity gains share common traits:

  • Test-Driven Development (TDD): Teams with strong testing practices see immediate ROI. Claude Code iterates until tests pass, enabling autonomous completion of entire features.
  • Clear Architectural Boundaries: Well-documented system design helps Claude Code plan changes correctly and avoid cascading failures.
  • Strong Code Review Culture: Successful teams use Claude Code to generate diffs and run CI, but retain human approval for merge decisions.
  • Explicit Delegation Patterns: Teams that use the `/code-review` multi-agent PR analysis and parallel subagent execution see the highest throughput.

Microsoft's internal adoption and Stripe's 1,370-engineer rollout both emphasize that engineers are shifting focus: less time writing boilerplate, more time on architecture, product decisions, and continuous orchestration of multiple agents in parallel.

The Unsolved Problem: Prompt Injection at Scale

Despite hardening frameworks, prompt injection remains the fundamental unsolved problem. In March 2026, Unit 42 documented web-based indirect prompt injection observed in the wild, with several confirmed cases of attackers poisoning prompts through:

  • Malicious commit messages and pull request descriptions
  • Crafted error messages in code or logs
  • Embedded prompts in documentation or comments
  • API responses from third-party services integrated via MCP

The Check Point Research disclosure (February 25, 2026) noted that hooks are "pattern-matching shell scripts, not a security boundary." A sophisticated prompt injection can still find ways around hooks. They provide meaningful defense-in-depth, but organizations should view them as guardrails, not walls.

Looking Forward: The Autumn 2026 Roadmap

Anthropic has signaled several upcoming capabilities:

  • VS Code Extension (Beta): Inline diffs, @-mentions, plan review, and conversation history directly in the editor
  • Enhanced Orchestration: Improved subagent delegation with better context sharing and result merging
  • Security-Focused Features: Claude Code Security (launched February 2026) performs vulnerability scanning on codebases proactively
  • Expanded Model Support: Latest releases default to Claude Sonnet 4.5, with option to use Claude Opus 4.6 for complex tasks

Conclusion: Agentic Development as Infrastructure

Claude Code represents a fundamental shift in how software gets written. It is not a copilot or a chat interface—it is an agentic system operating in your terminal with your shell permissions. The billion-dollar adoption curve reflects genuine productivity gains, but the March 2026 source code leak and documented CVEs demonstrate that security is not optional.

Organizations deploying Claude Code should:

  1. Treat it as infrastructure, not a convenience tool. Apply governance standards used for CI/CD systems.
  2. Implement defense-in-depth across seven categories: permissions, MCP vetting, credential isolation, supply chain protection, hooks, audit logging, and human oversight.
  3. Never run as admin. Isolate Claude Code in sandboxes or VMs when working with untrusted repositories.
  4. Vet config files as trust boundaries. Protect `.claude/` and `.mcp.json` like you protect IAM policies.
  5. Embrace human review. Delegate 0–20% of work fully to the agent; iterate and collaborate on the rest.
  6. Update aggressively. Track Anthropic's security releases and patch CVEs immediately.

The tool is powerful. The threat model is real. The payoff is substantial—but only if you build security into your deployment from day one.


Verified Sources

[1] Anthropic Claude Code Product Page
"Claude Code is an agentic coding system that reads your codebase, makes changes across files, runs tests, and delivers committed code." Official product documentation and architecture overview.
https://www.anthropic.com/product/claude-code
Accessed April 12, 2026.
[2] Claude Code Official Documentation - Overview
"Claude Code is an agentic coding tool that reads your codebase, edits files, runs commands, and integrates with your development tools." Complete CLI reference and feature guide.
https://code.claude.com/docs/en/overview
Accessed April 13, 2026 (17 hours ago per metadata).
[3] GitHub Repository - anthropics/claude-code
"Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows." Public GitHub repository with issue tracking and plugin architecture documentation.
https://github.com/anthropics/claude-code
Latest release: April 12, 2026.
[4] Anthropic News - "Enabling Claude Code to Work More Autonomously"
Details on checkpointing, subagents, hooks, background tasks, and Claude Sonnet 4.5 as default model. Includes Claude Agent SDK announcements and partner network launch.
https://www.anthropic.com/news/enabling-claude-code-to-work-more-autonomously
Published 2026.
[5] Shawn Kanungo - "Claude Code Explained: The Future of Agentic Coding"
"By November 2025, Claude Code had surpassed $1 billion in annualised revenue. By early 2026, analysts estimate the run rate is closer to $2 billion." Comprehensive financial analysis and adoption metrics.
https://shawnkanungo.com/blog/what-is-claude-code-and-why-everyone-is-talking-about-it
Published February 23, 2026.
[6] Zscaler ThreatLabz - "Anthropic Claude Code Leak"
"On March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code through a 59.8 MB JavaScript source map (.map) file...The leaked file contained approximately 513,000 lines of unobfuscated TypeScript across 1,906 files." Detailed security analysis of the leak, CVE implications, and malicious repository threats.
https://www.zscaler.com/blogs/security-research/anthropic-claude-code-leak
Published April 9, 2026 (3 days ago).
[7] Claude Code Official Security Documentation
"Claude Code uses strict read-only permissions by default. When additional actions are needed (editing files, running tests, executing commands), Claude Code requests explicit permission." Permission architecture, sandbox boundaries, and credential protection.
https://code.claude.com/docs/en/security
Updated within 12 hours of April 13, 2026.
[8] Backslash Security - "Claude Code Security Best Practices"
"A single poisoned prompt or misconfigured setting can turn Claude Code from your coding partner into a threat actor." Comprehensive hardening guidance including hook configuration, MCP server vetting, and deny-list strategies.
https://www.backslash.security/blog/claude-code-security-best-practices
Published 2026.
[9] Tim McAllister (Medium) - "Hardening Claude Code: A Security Review Framework and the Prompt That Does It For You"
Seven-phase hardening framework implementation: security assessment, pre-execution gates, supply chain protection, malware scanning, credential hygiene, hook verification, maintenance scheduling. Includes discussion of CVE-2025-55284 API key theft and defense-in-depth approach.
https://medium.com/@emergentcap/hardening-claude-code-a-security-review-framework-and-the-prompt-that-does-it-for-you-c546831f2cec
Published February 15, 2026.
[10] Check Point Research - Claude Code Security Disclosures
Detailed analysis of CVE-2025-59536 (Project-contained code execution, CVSS 8.7) and CVE-2026-21852 (API key exfiltration via ANTHROPIC_BASE_URL override, CVSS 8.9). Reported between July–December 2025, patched before February 2026 publication.
Referenced in: affaan-m/everything-claude-code GitHub repository and Zscaler ThreatLabz analysis.
Published February 25, 2026.
[11] Concentric AI - "Claude Security Guide 2026"
Comprehensive data governance and organizational security strategy for Claude deployment. Emphasis on data hygiene, permission auditing, and preventing prompt injection via untrusted inputs.
https://concentric.ai/claude-security-guide/
Published/updated April 1, 2026.
[12] RockCyber Musings - "Claude Secure Coding Rules: Open Source Security That Scales"
"100+ rule sets covering OWASP, AI/ML, RAG, IaC, containers, and CI/CD." Overview of community-driven security rule framework for Claude Code.
https://www.rockcybermusings.com/p/claude-secure-coding-rules-open-source-ai-security
Published December 2, 2025.
[13] MintMCP - "Claude Code Security: Enterprise Best Practices & Risk Mitigation"
"Claude Code operates directly in developers' terminals with the same permissions as the user." Enterprise deployment strategies, managed settings, audit logging, and compliance frameworks (SOC 2 Type II, ZDR mode).
https://www.mintmcp.com/blog/claude-code-security
Published December 18, 2025.
[14] affaan-m/everything-claude-code - "The Security Guide"
"With the tooling reaching critical mass, the gravity of exploits multiplies." Analysis of trust boundaries, hook logic testing, CVE-2025-59536 and CVE-2026-21852, and indirect prompt injection (Unit 42, March 3, 2026).
https://github.com/affaan-m/everything-claude-code/blob/main/the-security-guide.md
Updated February 25, 2026.
[15] Wikipedia - Claude (Language Model)
"Claude Code was released in February 2025 as an agentic command line tool...By November 2025, Claude Code reached $1 billion in annualised revenue. Anthropic's overall annualised revenue jumped from roughly $1 billion at the start of 2025 to $5 billion by August." Comprehensive timeline including March 2026 source code leak, threat actor GTG-2002, and model release history.
https://en.wikipedia.org/wiki/Claude_(language_model)
Updated April 12, 2026 (4 hours ago).
[16] SpecterOps - "Leveling Up Secure Code Reviews with Claude Code"
"Claude Code is a force multiplier when performing secure code reviews during an assessment." Methodology for using Claude Code in security assessments, system prompt construction, and avoiding false positives in vulnerability analysis.
https://specterops.io/blog/2026/03/26/leveling-up-secure-code-reviews-with-claude-code/
Published March 26, 2026.
[17] Medium - "The Evolution of Claude Code in 2025" (LM Po)
"Claude Code underwent a remarkable transformation, evolving from a modest terminal-based research preview into a sophisticated multi-agent development platform." Detailed timeline of four development eras throughout 2025 and financial context (4.5x revenue increase following Claude 4 launch).
https://medium.com/@lmpo/the-evolution-of-claude-code-in-2025-a7355dcb7f70
Published January 4, 2026.
[18] GitHub - shanraisshan/claude-code-best-practice
Comprehensive collection of workflow patterns, terminal commands, multi-agent PR analysis, debugging techniques, and architectural best practices for Claude Code deployment. Includes guidance on model selection, context management, and skills-based task delegation.
https://github.com/shanraisshan/claude-code-best-practice
Updated April 11, 2026 (2 days ago).

Thursday, April 9, 2026

VitalChek: Order Birth and Marriage Certificates Online for Real id


VitalChek Background and Process.

What it is: VitalChek is a private company — not a government agency — that is authorized by individual states to help process official vital records requests online. It serves as the exclusive partner for more than 500 U.S. government agencies and processes more than 4 million orders per year. It's been operating for over 35 years and is owned by LexisNexis Risk Solutions.

How the process works:

You go to VitalChek's website, select the state or local agency that holds your records, fill out the application with details like full name, date of birth, place of birth, and parents' names. VitalChek then forwards your request to the state or county agency that actually issues the certified document — the certificate you receive comes from the government agency, not from VitalChek itself. You may need to upload a government-issued photo ID and, if ordering for someone else, proof of your relationship to the person named on the record.

For Real ID purposes specifically, certified copies are typically the only type accepted when used to obtain a state or federally-issued photo ID. You can order birth certificates, marriage certificates, divorce decrees, and death certificates — all the documentary chain you'd need to demonstrate identity and legal name changes at the DMV. If your name has changed through marriage, for instance, you'd order both the birth certificate (identity/citizenship proof) and the marriage license (name-change proof).

Security measures:

VitalChek uses LexisNexis technology for electronic identity verification on most orders, which confirms identity quickly and securely. They operate under PCI-compliant security standards, which include stringent data security audits. For security purposes, VitalChek does not handle the certificates themselves nor does it control the actual issuing and shipping process — those actions are all handled by the government agency. The certificate is shipped to the address associated with the credit card used, which is an anti-fraud measure. They also collect standard information automatically (IP address, browser data, cookies) as described in their privacy policy, which is managed under the LexisNexis privacy framework.

Costs:

This is where VitalChek's convenience comes at a price. The total cost typically ranges from about $38 to $58 for a single copy with standard shipping. That breaks down into three components: the state/agency fee (typically $15–$40 depending on jurisdiction), a VitalChek processing fee that generally falls between $2 and $16 depending on jurisdiction, and shipping. You can order directly by mail or in person from the issuing authority, which is often cheaper because you skip the VitalChek processing fee, but it may require more paperwork and longer waits.

Key caveats to be aware of:

Fees are non-refundable — the fee is for the search, not the document itself. If the record isn't found, you may receive a "no record" letter but no refund. Processing times vary widely by agency — anywhere from a few days to several weeks — and VitalChek has no control over that. Also, impostor websites mimicking VitalChek's name and appearance are common, so it's important to make sure you're on the actual vitalchek.com domain.

Bottom line for Real ID prep: It's a legitimate and reasonably secure way to get the documents you need, particularly if you were born out of state or need records from multiple jurisdictions. The convenience premium over ordering directly from the issuing agency is modest — roughly $7 to $15 extra per document. For someone assembling the documentary chain for a Real ID (birth certificate + marriage license to show name change, for example), being able to order everything online from one interface rather than mailing separate applications to different state agencies is worth considering.

Order Birth Certificates Online | VitalChek

vitalchek.com

Order Birth Certificates Online | VitalChek

VitalChek – Birth Certificates, Death Certificates, Marriage Records, Divorce Records and Vital Records

How VitalChek Works

What Do You Need?

To complete your order smoothly, please have the following information ready:

Personal Details

Full name, date of birth and place of birth.

  • Identification:
    Not all orders require this, but you may need a valid government-issued ID (e.g., driver's license, passport).
  • Proof of Entitlement:
    Occasionally, we'll need documentation proving your right to access the certificate.
  • Payment Method:
    Credit or debit card.

Birth Certificates

Our vital records are certified official documents provided directly by government agencies.

Here's what you can expect on your certificate:

  • Accurate and Up-to-date Information:
    All data is verified to ensure accuracy.
  • Official Seal and Signatures:
    Each certificate is legally recognized and comes with official seals and signatures directly from the government agency. These can be used for drivers licenses, insurance, travel benefits and more.
  • Secure and Confidential:
    Your personal information is handled with the highest security and confidentiality.

Order Birth Certificates Online | VitalChek

VitalChek has partnered with vital record agencies within the United States to bring you the ability to order the vital records you need.

Need a different certificate?

We can also help you obtain your Death, Marriage, Divorce certificates. We can also help if you need certificates from other states. Order your certificate now..

We have direct relationships with state and local government agencies in the United States.

That means we can process your request quickly, affordably, and securely. The only thing faster is doing it in person, but that's not always possible or convenient, and that's why we're here.

  • Experienced
  • Authorized
  • Transparent
  • Secure
  • Fast

Hundreds of government agencies nationwide exclusively trust VitalChek for accepting their birth certificates and other vital record orders.

Our easy application process will help you find the right agency and certificate for your specific needs.

Why should you trust VitalChek?

  • 4 million vital documents processed per year
  • More than 35 years of experience
  • 100% compliance with the highest level PCI standards to protect your personal information

ORDER NOW

 

10 Items Quietly Disappearing From Store Shelves


10 Items Quietly Disappearing From Store Shelves — Most Won't Exist Next Year - YouTube

Disappearing From Store Shelves: An Investigation Into Household Essentials and Supply Chain Realities

BLUF (Bottom Line Up Front):
A recent viral video claims ten household items are "disappearing" and urges consumers to stock up. Our investigation confirms that some of these items do face genuine supply challenges—but the story is more complex than a simple vanishing act. Hazmat shipping regulations and reduced demand have genuinely constrained availability of strike-anywhere matches, and borax faces potential regulatory restrictions in the United States modeled on the European Union's 2010 classification as a reproductive toxicant. However, most of the "critical" items investigated remain readily available through conventional channels, often at lower costs than sensationalized claims suggest.


Executive Summary

Over the past five years, we have witnessed documented shifts in retail stock of specific commodity items—notably strike-anywhere matches, which have seen multiple manufacturers including Ohio Blue Tips, Penley, and UCO discontinue production due to hazmat shipping restrictions imposed by FedEx, UPS, and USPS. We also document regulatory pressure on borax and the legitimate multifunctional uses of potassium permanganate. Yet our research reveals that many of the most touted "disappearing" items are either still widely available, available at modest cost, or have been mischaracterized in terms of their emergency utility.

This article presents what we found—grounded in scientific evidence, regulatory filings, and market data—and what consumers actually need to know about supply, efficacy, and regulatory status.


Item 1: Activated Charcoal for Poison Treatment

Claim: Activated charcoal powder is a life-saving poison treatment that "the WH recommends" and is being quietly replaced by capsules and removed from retail shelves.

What Research Shows:

Activated charcoal is a form of carbon that can bind other substances onto its surface in a process known as adsorption, and it is effective in adsorbing many types of poison in the gut, so the poison does not enter the body. The World Health Organization includes activated charcoal in its Model List of Essential Medicines, and it is most efficacious when given within one hour of ingestion of the toxin.

However, critical caveats apply. Over-the-counter products might not be as "activated" as the activated charcoal used in the ER, so they would be less effective. Over-the-counter activated charcoal typically comes in 250 mg tablets. Providing the same dose given in an emergency room (50–100 g) would require hundreds of tablets. More importantly, while activated charcoal is a proven treatment for certain severe ingestions in a clinical setting, experts overwhelmingly agree that it is not an effective or recommended home treatment for food poisoning. Additionally, activated charcoal can also bind to foods you have eaten, blocking the absorption of nutrients and medications you may have taken, reducing their effectiveness.

Bottom Line:
Activated charcoal powder does have documented emergency medical use for specific poisonings when administered in a hospital setting under professional guidance. Home use is not recommended by poison control experts. Availability: Still widely available online and through bulk suppliers at modest cost ($10–18 per pound). The claim that it is "disappearing" is not supported by current market data.


Item 2: Potassium Permanganate and the DEA Regulation Question

Claim: Potassium permanganate is regulated by the DEA, tracked when purchased in bulk, and "quietly" being removed from retail shelves because of government restrictions.

What Research Shows:

Potassium permanganate is listed as a List II chemical under DEA control, designated as one used in the manufacture of controlled substances. The domestic threshold for potassium permanganate is 55 kilograms, and the import/export threshold is 500 kilograms. The DEA learned that U.S. firms were exporting large quantities of potassium permanganate to cocaine-producing countries, and significant amounts of these chemicals ultimately were diverted to clandestine cocaine laboratories.

However, this chemical control program has been effective in reducing the supply of illicit methamphetamine and cocaine: when the Chemical Diversion and Trafficking Act went into effect in 1989, the quantity of these chemicals shipped to South America from the United States declined greatly.

Regarding the Glycerin-Permanganate Reaction:
The reaction between potassium permanganate and glycerol is highly exothermic, resulting rapidly in a flame, along with the formation of carbon dioxide and water vapor. The reaction can produce a bright, pinkish (lilac) flame for a few seconds, leaving a dark brown or black residue. However, while the potassium permanganate and glycerin reaction is popular in chemical demonstration videos and some survival manuals, it is generally not part of a standard fire-starting kit for most outdoor enthusiasts, and other methods such as friction-based fire making or using commercial fire starters are typically more reliable and less hazardous for everyday use.

Bottom Line:
Potassium permanganate is legal to own and remains available. DEA tracking does occur at the bulk level (over 55 kg domestically), but this does not affect home purchases of small quantities. The chemical does have documented fire-starting properties via glycerin contact, but is rarely recommended as a primary survival fire method. Availability: Online through chemical suppliers, aquarium stores, and veterinary suppliers. Cost: $8–15 per 100–500 gram bottle.


Item 3: Strike-Anywhere Matches—A Genuine Market Shift

Claim: Strike-anywhere matches are disappearing; only the Diamond brand remains, and Ohio Blue Tips have been permanently discontinued.

What Research Shows:

This claim is substantially accurate regarding market trends. Ohio Blue Tips, Penley Strike Anywhere Matches, and UCO Strike Anywhere Matches have all been discontinued. The only brand widely available in the US at this time is Diamond Greenlight Strike Anywhere Matches. The primary driver is shipping logistics: Strike anywhere matches are difficult to find and expensive to ship since they could accidentally ignite during shipping. The USPS prohibits shipping strike anywhere matches and both UPS and FedEx require that strike anywhere matches be shipped as hazardous materials and only via ground shipping.

However, Diamond Greenlight Strike Anywhere Kitchen Matches are available through multiple retail channels, including hardware stores, with boxes containing 300 matches and made from responsibly managed forests. Diamond Greenlight Strike Anywhere matches are available for purchase online through Walmart and Amazon.

Quality concerns: Some users report that the newer Diamond Greenlight formulation performs less reliably than older versions. The matches have been reformulated, possibly to circumvent shipping restrictions, which may account for the difficulty in lighting.

Bottom Line:
Strike-anywhere matches have genuinely consolidated to a single major brand due to hazmat regulations, and some older brands have been discontinued. However, Diamond Greenlight matches remain available through major retailers. Availability: Walmart, Amazon, Ace Hardware. Cost: $30–50 for 10 boxes (2,500 matches).


Item 4: Kerosene Heating Fuel—A Quiet Decline in Infrastructure

Claim: Gas stations are "ripping out" kerosene pumps due to low demand; the infrastructure is in "death spiral."

What Research Shows:

Kerosene remains a practical fuel for portable heaters, lamps, and cleaning applications, especially during power outages or in off-grid scenarios. While many consumers initially check hardware stores, these retailers often price kerosene at $10 to $15 per gallon. In contrast, numerous gas stations across the United States sell K-1 grade kerosene for just $4 to $5 per gallon.

Market data on station closures is less dramatic than the video claims. While some regional shortages have occurred (particularly during peak heating season or in areas with limited demand), no national shortage has been documented since 2021. In 2022, Maine experienced kerosene supply constraints driven by war in Ukraine and increased jet fuel demand. Despite fears that the Israel-Hamas War and the EU boycott on Russian fuel would lead to gas shortages, no US state experienced a shortage between 2023 and 2025.

Bottom Line:
Kerosene availability is declining in some regions due to low consumer demand and the shift to electric heating, but infrastructure has not collapsed. Seasonal availability and regional variation are real. Availability: Gas stations (check GasBuddy's kerosene locator), Tractor Supply, online suppliers. Cost: $4–5 per gallon at gas stations; $10–15 at hardware stores.


Item 5: Borax and Regulatory Headwinds

Claim: Borax is disappearing from shelves because the U.S. is "quietly" following Europe's reproductive toxicity ban.

What Research Shows:

Borax is currently legal in the United States and available in laundry sections nationwide. However, there is genuine regulatory pressure. Borax is a naturally occurring mineral composed of sodium, boron, oxygen, and water. The European Chemicals Agency (ECHA) has classified borax as a Substance of Very High Concern (SVHC) because studies, primarily conducted on rodents exposed to high doses, suggested adverse effects on fertility and developmental processes. In 2015, this led the ECHA to classify boron compounds as reproductive toxicants under Category 1B.

In contrast, in the United States, the Environmental Protection Agency acknowledges potential reproductive risks but does not classify borax as a known human toxin at typical exposure levels. As a result, it remains legal for over-the-counter sale.

Bottom Line:
Borax remains legal and available in the U.S., though it is restricted or banned in the EU and UK. U.S. consumer groups are pushing for restrictions, which could eventually result in tighter regulation, but no ban is imminent. Availability: Grocery stores (spice and laundry aisles), Indian grocery stores (as "fit curry"), online. Cost: $5–21 for a multi-year supply.


Item 6: Other Items Investigated

We also examined diatomaceous earth, wool military blankets, canning lids, paraffin lamp oil, and alum. All of these items remain available, though availability varies by region and some face minor market consolidation. Detailed findings:

  • Diatomaceous Earth (food grade): Available through tractor supply, livestock suppliers, and online. Cost: $15–25 per 15 lbs. Caution: Pool-grade DE poses silicosis risk; verify "food grade" labeling.
  • Wool Military Surplus Blankets: Available through surplus dealers, eBay, Coleman's military surplus. Cost: $25–50. Supply is finite due to discontinued military procurement, making this a legitimate collectible.
  • Canning Lids: Genuine Ball and Kerr lids available through big-box retailers and direct from manufacturers. Counterfeits exist, particularly on Amazon; the sealing compound on counterfeits may be too thin, and rim dimensions inconsistent. Cost: $0.08–0.15 per lid.
  • Paraffin Lamp Oil: Available through Lowe's, Walmart, and online. Cost: $32–48 per gallon. Genuine paraffin (not citronella) produces minimal soot and is safe for indoor use.
  • Alum: Used historically for water clarification and pickle-curing. Available in spice aisles and Indian grocery stores. Cost: $5–8 per pound.

What the Research Reveals About Supply Chains

Legitimate Trends:

  1. Consolidation: Multiple suppliers have exited commodity markets (matches, wool blankets, some brands of kerosene heaters) due to low profit margins, regulatory burden, or shifting consumer preferences.
  2. Hazmat & Shipping: Items classified as hazardous (strike-anywhere matches, potassium permanganate in quantity) face shipping restrictions that reduce retail availability and increase retail prices.
  3. Regulatory Divergence: The U.S. and EU have begun to regulate chemicals differently (borax, boric acid), and U.S. consumer groups are calling for harmonization. This creates genuine uncertainty for future availability.
  4. Market Efficiencies: Retailers have optimized inventory for high-turnover items. Low-demand specialty goods (kerosene, potassium permanganate, strike-anywhere matches) are stocked selectively or on order.

Overstated Claims:

The video presents these trends as a coordinated, imminent collapse. Our research shows that:

  • No government agency is "quietly" removing items from shelves.
  • Most items remain available through conventional online retailers, specialty suppliers, or regional retailers.
  • Prices have risen modestly in some categories (notably kerosene during peak season), but not by the multiples the video implies.
  • Supply chains remain functional for nearly all items listed, with regional variations.

Medical and Safety Considerations

Activated Charcoal:
The Utah Poison Control Center states that activated charcoal should only be given in health care facilities. They do not recommend at-home use of activated charcoal for poisonings. If a poisoning occurs, call Poison Control (1-800-222-1222 in the U.S.) before attempting home treatment.

Potassium Permanganate:
While the glycerin-permanganate reaction is documented, this activity requires the use of hazardous components and has the potential for hazardous reactions. Potassium permanganate is a powerful oxidizing agent that can explode on sudden heating. Small particles of potassium permanganate may be expelled from the reaction vessel. This is unsuitable for casual survival use and is primarily taught in military and advanced wilderness training.

Borax:
Borax is a skin and eye irritant, and inhaling the powder can lead to respiratory irritation. Most importantly, ingestion can cause severe poisoning, especially in children and pets, with potential for long-term health issues and even death.


Bottom Line for Consumers

If you are genuinely concerned about supply disruption:

  1. Focus on items with documented supply challenges: Strike-anywhere matches (buy through retail now), kerosene (seasonal purchasing is advisable in cold climates), wool blankets (genuine military surplus is finite).
  2. Ignore hype on items that are readily available: Activated charcoal powder, alum, borax, paraffin oil, diatomaceous earth, and canning lids remain available through normal retail and online channels.
  3. Understand regulatory risks: Borax may face future restriction in the U.S., but this is not imminent. Stay informed via EPA updates.
  4. Prioritize reliability: For emergency preparedness, conventional methods (commercial fire starters, standard lighter fluid, modern canning equipment) remain more reliable than chemical combinations or rare commodity items.
  5. Avoid false urgency: Viral content that frames supply chains as "collapsing" or "quietly" being dismantled is misleading. Real supply issues are typically driven by market economics, not conspiracy, and occur gradually over years.

Sources and Citations

Government and Regulatory:

Medical and Toxicology:

Chemistry and Chemical Safety:

Market and Product Availability:

Regulatory and Policy:


Methodology Note:
This report draws on peer-reviewed toxicology literature, government regulatory filings, current retail inventory data, and market analysis. Claims from the source video are fact-checked against primary sources, including academic literature, official agency guidance, and real-time market data. Where uncertainty exists, we note it. Recommendations prioritize evidence-based safety over sensationalism.


Last Updated: April 2026