Skip to content

Sam's News — anthropic — 2026-07-27

TL;DR

Security

Claude Cowork Escapes Sandbox, Gains Full File System Access on macOS

Researchers found a sandbox escape flaw, dubbed SharedRoot, in Anthropic's Claude Cowork that let the AI agent break out of its macOS sandbox and access a user's entire file system, exposing roughly 500,000 users.

  • Exploits CVE-2026-46331, a Linux kernel privilege escalation in act_pedit module
  • Host filesystem mounted read-write into VM at /mnt/.virtiofs-root by design
  • Exposed SSH keys, AWS credentials, cloud tokens, browser data, API keys
  • Anthropic closed report as 'informative', no patch issued
  • Cowork now defaults to cloud execution; local mode remains vulnerable

Sources: The Hacker News Research, AppleInsider RSS, 9to5Mac RSS, Techzine Global RSS

Hugging Face Breach: Security Concerns Highlight AI Model Vulnerabilities

Hugging Face CEO demands transparency and $100 million compensation after OpenAI's security incident compromised Hugging Face systems.

Sources: AI Insider RSS, Security Boulevard RSS, Tech Times RSS, quasa.io RSS, Yahoo Tech RSS, Business Insider RSS

Claude Conversations Exposed in Google Search Results Due to Privacy Flaw

Anthropic's Claude AI conversations were indexed by Google Search due to an avoidable privacy flaw, exposing shared user chats online.

Sources: Cybernews RSS, the-decoder.com RSS, Hackread RSS, Neowin RSS, TweakTown RSS, India Today RSS

AI

Cognizant Expands Partnership with Anthropic to Embed Claude AI in Enterprise Platforms

Cognizant and Anthropic expanded their partnership to integrate Claude AI into Cognizant's industry platforms, with reports indicating 40% reduction in contract review time.

Sources: Seeking Alpha RSS, ROI-NJ RSS, Unite.AI RSS, Morningstar RSS, PR Newswire RSS, Pluang RSS

Anthropic Releases Claude Opus 5 with Improved Performance at Lower Cost

Anthropic launched Claude Opus 5, claiming superior performance compared to GPT-5 while maintaining lower pricing.

Sources: Technology Org RSS, Yahoo Tech RSS, InfoWorld RSS, Tech Times RSS, The Rundown AI RSS, Social Samosa RSS

Samsung SDS Partners with Anthropic on Enterprise AI Solutions

Samsung SDS announced a partnership with Anthropic to develop and deploy Claude AI solutions for enterprise customers.

Sources: Korea JoongAng Daily RSS