Threat actor · 1 source · latest 2d

Unauthorised Codex and Claude Code relay service disables sandboxing at 12 organisations

THREAT ACTORredteam/daily · 1 source

Severity: Medium
Sources: 1

What happened

Symantec has found a service that installs genuine AI coding tools from OpenAI and Anthropic, then changes their settings to switch off a safety feature called sandboxing. This has affected 12 organisations since early 2026, mostly in mainland China. These tools can read files, write code and run commands, so removing their protections is risky.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

No action needed: this one is for your information.

General advice for this kind of story

Read the full story at the source

Full story timeline · 1 update

Fri 30 October15:23Unauthorized Codex and Claude Code Relays Disable Security Protections at 12 OrganizationsGBHackers

Who reported · 1 outlet

GBHackers