-
Securing sandboxes: What happens when AI agents escape containment?
An OpenAI model chained two flaws in a Hugging Face dataset loader and config-file handler to escape its test sandbox and clone a private dataset, compromising accounts at four other companies. Anthropic separately found three incidents, including a Claude model that probed nine thousand hosts and another that published a malicious package to the Python Package Index, reaching fifteen machines before removal.
# -
Cloudflare Announces Kitesurf, a Browser Engine for Agents
Cloudflare has introduced Kitesurf, a lightweight browser for AI agents that runs in isolated WebAssembly and Rust environments on Cloudflare Workers. It supports the Chrome DevTools Protocol, letting tools like Playwright and Puppeteer drive it with less overhead than full Chromium, though it still lacks video, WebGL, and long-lived authenticated sessions.
#