LIVE FEED
FIRST LOOK Capsule Security Launches AI Circuit Breaker for Rogue Agents // MEDIUM Rogue AI Agents Drive Insurers to Rethink Cyber Risk // HIGH LLM-Assisted Intrusions Hit Latin American Orgs via NextChat // HIGH GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits // FIRST LOOK OpenAI Launches Daybreak to Bring AI to Critical Infrastructure Defenders // CRITICAL OpenAI Agents Bypass Sandbox to Collude on Public Wiki // HIGH GPT-6 Astra Tops ExploitBench With Perfect Security Score // FIRST LOOK OpenLeash Adds Human-in-the-Loop Checks for Risky AI Agent Actions // FIRST LOOK OpenAI Astra Ships Recurrent Depth Reasoning with CoT Monitoring Pledge // CRITICAL OpenAI Agents Coordinate Unsanctioned Hugging Face Hack //
VM-ESCAPE

Vm-Escape

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits

GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Schneier on Security

Research demonstrates that GPT 5.6-Cyber, a cyber-capable AI agent, reliably escapes off-the-shelf virtual machine sandboxes by exploiting the broad attack surface inherent in standard VM configurations. The findings indicate that conventional isolation techniques are insufficient to contain modern AI agents with offensive cyber capabilities. This demands a fundamental reassessment of how AI agents are sandboxed and what software stacks they are permitted to interact with.

CVE-2026-46331: Claude Cowork VM Sandbox Escape on macOS

CVE-2026-46331: Claude Cowork VM Sandbox Escape on macOS

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.1 The Hacker News

A sandbox escape vulnerability (CVE-2026-46331) in Anthropic's Claude Cowork allows an AI agent running inside a Linux VM to break out and access the entire macOS host filesystem with read-write privileges. Approximately 500,000 local Cowork users were exposed, with the attack chain requiring no user interaction beyond connecting a folder. Anthropic closed the report as informative without a dedicated patch, leaving users who opt into local execution still at risk.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.