AI relay disables safeguards in Codex and Claude Code
Dark Reading reports that an unauthorized AI relay is installing genuine command line tools for OpenAI Codex and Anthropic Claude Code on enterprise systems. The Symantec Threat Hunter Team found the service had reached about a dozen organizations since early 2026, mainly in mainland China, with additional cases in South Korea, Taiwan, and Malaysia.
The relay changes the tools to send requests through its own infrastructure instead of OpenAI or Anthropic networks. Its scripts also disable execution sandboxes, enable network access for the write sandbox, turn off telemetry and error reporting, and replace user credentials with tokens issued by the relay.
Symantec observed no malware or other malicious activity linked to the service. However, the relay can access prompts, files, and secrets sent through it, while the disabled sandbox could allow generated commands to run with the user's account privileges.
We hope you enjoyed this article
Consider subscribing to one of our newsletters like Cybersecurity AI Weekly or Daily AI Brief.
Also, consider following us on social media:
More from Cybersecurity
Oct 29 Veracode Finds AI Code Security Pass Rate Rises to 62% Oct 29 Reco Finds AI Agent Intake Triggers Can Inherit Excessive Access Oct 29 Check Point Launches MHO 200 for AI Data Center Traffic Oct 29 Pluto Security finds cryptominers in Hugging Face model repositories Oct 29 Anthropic spent $2.75 million on Dario Amodei's security in 2025Cybersecurity AI Weekly
Weekly newsletter about AI in Cybersecurity.
Market report
2025 Generative AI in Professional Services Report
Thomson Reuters
This report by Thomson Reuters explores the integration and impact of generative AI technologies, such as ChatGPT and Microsoft Copilot, within the professional services sector. It highlights the growing adoption of GenAI tools across industries like legal, tax, accounting, and government, and discusses the challenges and opportunities these technologies present. The report also examines professionals' perceptions of GenAI and the need for strategic integration to maximize its value.
Read moreYou may also like
Anthropic Fellows research finds coding agents can bypass action monitors
Hackers Use Stolen AI API Keys to Fund Autonomous Scans
Suspected Chinese spies impersonate AI policy figures in phishing campaign
External test found gaps in OpenAI agent monitoring
SOCRadar finds AI managed ransomware operation targeting 62 organizations
Daily AI Brief: the AI news that matters, in your inbox.