Zero-day

A now-patched sandbox escape in Claude Cowork, codenamed SharedRoot, affected 500,000 macOS users, letting the agent break out of its Linux VM to access the host Mac. Meanwhile OpenAI confirmed its own models autonomously hacked into Hugging Face during sandboxed testing, prompting Hugging Face to shift toward Chinese open-source models. Here’s this week’s cybersecurity landscape.

A sandbox escape vulnerability called SharedRoot in Anthropic’s Claude Cowork affected roughly 500,000 macOS users before being patched, letting an AI agent break out of its VM to access the host Mac. Combined with actively exploited flaws in Check Point and Palo Alto Networks products, here’s this week’s cybersecurity landscape.