Unauthorised Codex and Claude Code relay service disables sandboxing at 12 organisations
THREAT ACTORAnthropicredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Symantec's Threat Hunter Team identified an unauthorised relay service that installs the genuine OpenAI Codex and Anthropic Claude Code command-line tools and rewrites their configuration to disable sandboxing. It has affected 12 organisations since early 2026, mostly in mainland China. Because these AI coding agents can read files, write code and run commands, removing sandboxing widens what they can do on a host.
For IT people · Written by AI from 1 source · Wrong?
What to do
- No action needed: this one is for your information.
General advice for this kind of story
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Products