Dark Reading
CompanyFacts
- Country
- United StatesSource: Wikidata
- Founded
- 2006Source: Wikidata
- Official website
- www.darkreading.comSource: Wikidata
Security timeline
- Activity reported by Dark ReadingGrey market relay service disables OpenAI Codex and Claude Code sandboxes and reroutes enterprise data
Recent news
Grey market relay service disables OpenAI Codex and Claude Code sandboxes and reroutes enterprise data
Symantec's Threat Hunter Team identified a relay service active since at least early 2026 that has touched about a dozen organisations, mostly in mainland China. Users install the genuine Codex or Claude Code tool, then run a fileless setup script from a lookalike domain that rewrites the config to point at relay servers, stores the relay key as a user-level variable, sets sandbox mode to danger-full-access, enables network access and turns off telemetry. This is not a flaw in either product, but the relay can see every prompt, file and secret and could alter replies to run commands with the user's rights. No such abuse was observed.
Researchers unable to explain why Italy's cyber threats differ from other countries
Dark Reading reports that researchers cannot fully explain why the cyber threat picture in Italy differs so much from that of any other country. The excerpt gives no figures, threat types, affected sectors or named actors, and identifies no specific cause.