LIVE FEED
HIGH OpenAI Engineer Used Chatbot to Plan Covert Bug Planting // HIGH OpenAI Engineer Arrested for Planting Hidden Spy Device // FIRST LOOK Laplace Intelligence Launches AI Red-Teaming for Robots and AVs // FIRST LOOK AWS Launches AgentCore Payments with Anchor Browser for AI Agents // MEDIUM OpenAI Lean Proof Mistranslation Exposes AI Verification Risk // HIGH Grok Bot AI Agent Leaks Personal Bank Data to Company Slack // HIGH Iran Used ChatGPT to Plant Fake Articles in US Publications // CRITICAL ARTEX AI and Claude Agents Weaponised in Korean Bank Attacks // HIGH Anthropic AI Agents Bypass Isolation Controls, Access Live Internet // FIRST LOOK Anthropic AI Agents Submit Visa Forms on State Dept Site //
VM-ISOLATION

Vm-Isolation

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Trail of Bits Ships Coop: Isolated VMs for Claude Code and Codex

Trail of Bits Ships Coop: Isolated VMs for Claude Code and Codex

FIRST LOOK ATLAS OWASP LOW Limited impact · Standard review ▲ 7.2 Anthropic (via HN)

Trail of Bits has released Coop, an open-source Rust CLI that provisions disposable, isolated virtual machines for running Claude Code and OpenAI Codex with full tool access — including Docker, git, compilers, and package managers — without exposing the host system. This directly closes the containment gap that has made agentic AI coding assistants a liability in developer environments, giving security teams a reproducible boundary between autonomous AI tool execution and production infrastructure. What remains unaddressed is broader multi-provider coverage, enterprise policy enforcement, and centralised audit logging maturity needed before this is ready for regulated-environment deployment at scale.

Claude Sandbox Escape Enables Credential Exfiltration

Claude Sandbox Escape Enables Credential Exfiltration

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 7.2 Simon Willison

Anthropic has published detailed documentation of its sandboxing architecture across Claude.ai, Claude Code, and Claude Cowork, including disclosure of a previously identified credential exfiltration vector via the api.anthropic.com/v1/files endpoint. The writeup covers process-level isolation technologies including gVisor, Seatbelt, Bubblewrap, and full VM approaches, and candidly acknowledges security gaps that were missed. This transparency is notable for the agentic AI space, where sandbox documentation is typically sparse and trust is difficult to calibrate.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.