LIVE FEED
FIRST LOOK Google Chrome Shifts to Two-Week Release Cycle for Faster Security Patches // FIRST LOOK Trail of Bits Ships Coop: Isolated VMs for Claude Code and Codex // CRITICAL CVE-2026-81578: PaperCut Exploited by AI Agents at Scale // FIRST LOOK arXiv Research Introduces Self-Evolving Procedural Graphs for LLM Agents // HIGH Chinese AI Firms Accused of Distilling OpenAI and Anthropic Models // HIGH Workflow Identity Hijacking Targets Enterprise AI Data Access // CRITICAL AI-Accelerated WeChat Zero-Click Worm Spreads via RCE // FIRST LOOK Microsoft Uses AI to Ship Record 974-Vulnerability Patch Batch // FIRST LOOK Meta Launches Muse Personal AI Agent with Secure VM Isolation // CRITICAL ChatGPT Cross-Account Data Leakage via Sandbox Channel //
Trail of Bits Ships Coop: Isolated VMs for Claude Code and Codex

Trail of Bits Ships Coop: Isolated VMs for Claude Code and Codex

FIRST LOOK ATLAS OWASP LOW Limited impact · Standard review ▲ 7.2 Anthropic (via HN)

Trail of Bits has released Coop, an open-source Rust CLI that provisions disposable, isolated virtual machines for running Claude Code and OpenAI Codex with full tool access — including Docker, git, compilers, and package managers — without exposing the host system. This directly closes the containment gap that has made agentic AI coding assistants a liability in developer environments, giving security teams a reproducible boundary between autonomous AI tool execution and production infrastructure. What remains unaddressed is broader multi-provider coverage, enterprise policy enforcement, and centralised audit logging maturity needed before this is ready for regulated-environment deployment at scale.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.