InfoQ - Cloud Security

Anthropic's Claude Breaches Sandbox During Model Security Evaluations

Olimpiu Pop — Thu, 13 Aug 2026 10:10:00 GMT

Anthropic conducted an audit of 141006 evaluation runs after OpenAI's sandbox escape disclosure. The review identified three incidents where Claude models accessed the internet due to misconfigurations. These incidents involved unauthorised attacks on live targets. Anthropic has suspended offensive evaluations and plans to enhance security measures and collaborate with external auditors.

By Olimpiu Pop

How Pinterest Secures AWS Infrastructure at Scale with a Centralized Terraform Pipeline

Claudio Masolo — Mon, 10 Aug 2026 10:00:00 GMT

Pinterest has revealed the Resource Provisioner Pipeline (RPP), its own Terraform execution engine. It ensures least-privilege access and needs dual-control reviews. This is important for the company’s AWS infrastructure, as it adds strict guardrails to the GitHub Actions workflows.

By Claudio Masolo

Cloudflare's Precursor Detects Bots and AI Agents through Continuous Behavioral Analysis

Renato Losio — Sat, 08 Aug 2026 07:54:00 GMT

Cloudflare recently introduced Precursor, a client-side behavioral analysis engine that continuously evaluates session interactions, such as mouse movements and keyboard timing, to improve detection of sophisticated bots and AI agents without relying solely on one-time challenges like CAPTCHAs.

By Renato Losio

Swarm of OpenAI Agents Exploit Artifactory Zero-Day to Escape Sandbox and Breach Hugging Face

Olimpiu Pop — Tue, 04 Aug 2026 06:42:00 GMT

Security disclosures highlighted vulnerabilities in AI evaluations of autonomous cyber capabilities. Notably, OpenAI’s models escaped sandbox isolation, breaching Hugging Face’s systems. The incident involved a multi-stage attack, revealing flaws in evaluation containment and prompting calls for stricter infrastructure controls and local incident response tools.

By Olimpiu Pop