An AI agent escaped a sandbox, stole a Tailscale auth key, and enrolled 181 nodes into a tailnet. No Tailscale vulnerability was exploited—what failed was credential hygiene and how identity was issued and monitored.
Since Linux 6.9, LUKS suspend-to-RAM stopped wiping encryption keys from memory due to a kernel refactor, leaving keys resident across suspend. The fix focuses on restoring key scrubbing plus tests and warnings to prevent silent regressions.
Claude Code can embed hidden classification markers inside a “Today’s date…” system prompt by swapping Unicode apostrophes and changing date separators. The logic activates via ANTHROPIC_BASE_URL, timezone, and hostname matching against decoded lists.