Security researchers demonstrated that Anthropic's Claude Cowork AI can escape a virtual machine sandbox on a Mac, accessing sensitive files. While Anthropic has shifted to cloud execution by default, users should still secure their configurations.