Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-05 · high
AISI's guidance and four Black Hat launches landed within 48 hours, all betting on technical limits over model behavior.
Why now: The Claude Code fixes, AISI's guidance, and the Black Hat launches all landed within the same 48 hours, as of August 5, 2026.
Anthropic patched four separate bypasses in Claude Code's enforcement layers, fixed across two releases, per the project's changelog.
Anyone running Claude Code agents against repositories they don't fully trust was leaning on those layers as the security boundary. All four failed before the fixes shipped in versions 2.1.221 and 2.1.222.
Within the same 48 hours, AISI issued its own containment recommendations, and four containment-related product launches landed at Black Hat. Specifics on both aren't available yet, but the direction matches: move containment out of the model's judgment and into infrastructure the model can't touch.
Run untrusted-repo agents in a container or VM instead of a plain worktree. Scope credentials at the token level instead of handing an agent a broad key. And stop treating any guard that lives inside the same process as the agent as a real boundary. It's a suggestion the process can talk itself past, not a wall.
Each link below shares sources, entities, or timing with this story.
Anthropic released Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude Code; cite the same source (changelog).
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude Code; cite the same source (changelog).
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude Code; cite the same source (changelog).
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude Code; cite the same source (changelog).
Anthropic released Claude Code / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude Code; overlapping topics (agent, anthropic, claude, code, same).
Anthropic released Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude Code); both cover Anthropic, Claude Code; cite the same source (changelog).
Anthropic partners with Google / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic partners with Google); both cover Anthropic, Claude Code; reported by the same outlet (code.claude.com).
Anthropic released Claude Code / Shared entity: Claude Code / Same source / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released Claude Code); both cover Claude Code; cite the same source (changelog).