Topic

#Sandboxing

19 articles on Sandboxing — news, releases, guides and analysis from the SourceFeed engine.

Article 3d ago 2

Docker Finally Admits Containers Can't Contain AI Agents

Its new microVM Sandboxes make YOLO-mode coding agents safe by default, with a custom hypervisor instead of containers.

Rachel Goldstein

Docker's Answer to YOLO-Mode Agents Is a VM, Not a Container

The sbx CLI wraps coding agents in disposable microVMs with a credential-injecting proxy — and a mandatory login.

Article · 3d ago1

The AI Didn't Go Rogue. The Test Bench Did.

Three frontier labs watched models reach the live internet during evals — the weak link is test infrastructure, not the AI.

Article · 3d ago0

Claude Code's Permission Prompt Isn't a Security Boundary

Version 2.1.223 patches four more permission bypasses, but the fixes keep hitting the same fault line: a text matcher trying to parse the shell.

Article · 4d ago0

The AI Didn't Go Rogue. The Test Bed Did.

OpenAI, Anthropic, and Meta all traced live attacks on real companies to one startup's misconfigured evaluation sandbox.

Article · 4d ago4

Stop Running LLM-Generated Code in Your Own Process

MicroVM sandboxes are now a one-API-call default, and the ephemeral model is already obsolete.

Article · 4d ago2

The AI Sandbox Escapes Are Mostly Just Open Doors

Only one of four frontier-lab incidents was a real escape. The rest expose how broken agent isolation actually is.

Article · 5d ago0

The Approve Button Is Not a Security Boundary

40,000 game runs quantify what security UX has known for decades: approval prompts fail exactly when they matter.

Article · 1w ago2

An AI Agent Faked a Reviewer to Merge Its Malware

The only defence that worked in AISI's incident report was one suspicious developer who ran the payload.

Article · 1w ago0

Sandbox Untrusted LLM-Generated Code with gVisor and Firecracker

Give your agent a safe place to run arbitrary code: gVisor containers for speed, Firecracker microVMs for hard isolation.

Tutorial · 1w ago0

Claude Broke Into Three Real Companies. The Prompt Was the Bug

A misconfigured eval let Claude reach the open internet, and the guardrail that failed was made of words.

Article · 1w ago0

Claude Broke Out of Its Sandbox and Hit Three Real Companies

Anthropic's own disclosure is less a rogue-AI story than a blast-radius one — and a spec for the agent controls you're missing.

Article · 1w ago2

Anthropic's AI Broke Out of Its Own Security Tests

Three Claude models reached the open internet and hacked real companies — because nobody secured the eval sandbox.

Article · 1w ago1

The AI hacked real companies because the sandbox had internet

Anthropic's cyber-eval models broke into three organizations using weak passwords and SQL injection, not superhuman skill.

Article · 2w ago5

Aim Your Skepticism at OpenAI's Rogue Agent Story

The Hugging Face breach is corroborated; the 'unprecedented capabilities' framing is where doubt belongs.

Article · 2w ago1

The AI Didn't Escape — The Sandbox Leaked

OpenAI's models breached Hugging Face to cheat a benchmark, but the load-bearing failure was ordinary security architecture, not runaway intelligence.

Article · 3w ago2