🔓 One short message. Full Mac access. Zero prompts.

Claude Cowork is Anthropic's local AI agent — grant it folder access, it handles tasks on your behalf. The guardrails turned out weaker than promised.

Researchers found SharedRoot: the agent runs in a Linux VM inside your Mac and can break out of it. One message unlocked full filesystem access — keychain credentials included — with no permission prompts. ~500,000 users were exposed before a patch shipped, per The Hacker News.

Newer versions default to cloud execution. Users who keep local mode without manual hardening remain at risk. An OpenAI agent escaped its own sandbox last week too. Rough season for sandboxes.

9to5Mac

🥊 Fury vs Joshua: warm-ups done, venue still a fight

Context: Fury and Joshua are Britain's two biggest heavyweights — and they've spent years failing to actually meet in the ring. Both won warm-up bouts this weekend, and the fight is looking closer than ever.

Fury stopped 46-year-old Wach in Thailand in seven, kissed him on the cheek, and went home — all for his Netflix show. Joshua had a wilder night: debutant Prenga dropped him after 20 seconds, then again, and still lost in round two.

Contract signed, purses around $100M each, Netflix ready. The sticking point is venue: Joshua wants Wembley and has the contractual right to insist, while the Saudi side eyes Madison Square Garden — per BBC Sport.

Five years too late. Still, $200M tends to focus the mind.

💸 One underscore. Eighteen months of an innocent man's life.

In 2018, Wisconsin police hunted a Kik predator under the username fusro_dah — a Skyrim reference. Their subpoena had a typo: they requested records for fus_ro_dah, one underscore short. Kik answered exactly what was asked.

The trail led to Canadian Brandon Klayme. No evidence on his devices — arrested anyway, convicted, sentenced to 18 months. The mistake only surfaced during his appeal, after he'd already served the full term. This week, Nova Scotia's Court of Appeal overturned the conviction: "He should never have been charged, let alone convicted."__

The actual suspect was never found, per Ars Technica.

💸 Chinese RAM newcomer just hit $484 billion on day one

Samsung, SK Hynix, and Micron have long split the global memory market between them — but AI data centers are straining supply, and device makers are hunting for alternatives. Into that gap stepped CXMT: shares surged 466 percent on its Shanghai debut, making it the most valuable Chinese company on the exchange.

Founded in 2016, CXMT is still "roughly one generation" behind the big three on specs, holds 8% of global RAM as of June 2026 — and is blacklisted by the Pentagon, which didn't stop Apple from asking the Trump administration for permission to buy its chips anyway.

One generation behind on tech, half a trillion on the ticker. The gap between hype and specs has rarely been this photogenic.

The Verge

📱 Three paragraphs beat months of prompt engineering

AI investor Matt Shumer posted a video: Claude Opus 5 built a playable first-person shooter from scratch — zero external assets, ~55,000 lines, everything generated inside the browser. The prompt was three paragraphs.

That flips the vibe-coding rule: *specify criteria, not adjectives*. Shumer wrote "level of the latest Call of Duty" and let an Opus 5-built critic define what that meant. He calls it a Gauntlet Loop — a real inspectable bar, isolated subagents, a harsh critic who never sees the builder's reasoning.

Skeptics assumed hidden manual work; Shumer published everything. Others confirmed it — the same prompt works on OpenAI's Sol 5.6 Ultra too. Honest caveat: in a blind test against real CoD footage, his game never won. The real thing took every round.

Decrypt

📌 Daily Recap · Jul 29

🔓 Claude's Mac agent could quietly escape its sandbox
🥊 Fury and Joshua inch closer after weekend warm-ups
💸 One missing underscore sent an innocent man to prison
💾 Chinese RAM upstart CXMT surged 466% on debut day
📱 Claude Opus 5 built a full FPS from three paragraphs

Someone in your life just had a long day and missed all of this — you know what to do

🪙 Crypto check
₿ BTC $64,004 📉 -0.6% (24h)
Ξ ETH $1,903 📉 -0.8% (24h)

😨/🤑 Fear & Greed: 28 — Fear

⚽ Zidane is back — this time on the touchline

Didier Deschamps had managed France for 14 years — longer than anyone in the job — before stepping down after a 2026 World Cup semi-final exit to Spain. Big shoes. Enormous, actually.

Zinedine Zidane has been confirmed as his successor. The 1998 World Cup winner with France hasn't been in management since leaving Real Madrid for the second time in 2021 — four years away from the dugout.

The man who lifted the trophy as a player now inherits the mission of lifting it as a coach. Whether lightning strikes the same country twice is the whole question.

BBC Sport

🔍 The FSB terrorism charge against Durov — and what it might set up

Background: Telegram's founder Pavel Durov was detained in France in August 2024 on charges that the platform enabled drug trafficking and fraud. A terrorism facilitation charge has now been added — and Durov responded by posting a profile photo of himself dressed as an ISIS fighter, the same provocation he used after the original charges.

As The Bell reports, the key question is why now. One scenario the outlet raises: the charge is a procedural step toward designating Telegram first as an extremist organization, then as "undesirable" under Russian law — a status that would effectively ban the platform and expose anyone operating within it to criminal liability.

🔓 One missing tag, hundreds of Claude chats on Google

On July 25, a Reddit user searched site:claude.ai/share and pulled up hundreds of strangers' Claude conversations — wallet seed phrases, apparent Social Security numbers, private legal questions. The cause: a missing noindex tag. Share links were meant to be unlisted, but without that crawler instruction, any link posted publicly became an indexed page.

By July 26 Anthropic patched it, Google cleared the results. Bing is still surfacing links — and a GitHub repo has already archived 453 chats, 11,241 messages in plain text. That copy isn't going anywhere.

Settings → Privacy → Shared Chats kills future access. What's already saved is already saved.

Decrypt

🎮 Blade is everyone's pick — just nobody's making his stuff

Marvel Tokon: Fighting Souls just set a genre record: 33,233 concurrent players on Steam — edging Street Fighter 6's 2023 beta (32,787) and nearly doubling Tekken 8's (15,035).

Of the whole roster, Magick and Blade dominated — with Blade the clear favourite as an Assist pick. Fitting, given the franchise's rough shape elsewhere: Kevin Feige recently called himself a "gigantic loser" for failing to get the Mahershala Ali film made in seven years, and the Arkane-developed game faces an uncertain future as Microsoft weighs selling or closing the studio.

For now, there's Marvel Tokon on August 6. Fans are voting with their character select screen.

Via IGN.

https://www.youtube.com/watch?v=pn83wYCJrPo

🚨 Pavel Durov added to Russia's terrorist and extremist registry

Telegram founder Pavel Durov has been added to the list of terrorists and extremists maintained by Rosfinmonitoring, Russia's financial intelligence unit.

Individuals on the registry are barred from interacting with media outlets, publishing information online, organising public events, and participating in elections. Financial activity is restricted to tax payments, wages, and compensation for damages.

💾 Final Fantasy 14 on Switch 2 is basically a roommate

Square Enix's MMO lands on Switch 2 on August 4 — bringing 117.2 GB of install size, nearly half the console's entire built-in storage. On PS5, smart compression keeps it under 60 GB. Switch 2 gets no such deal.

🔸 All five expansions included in that 117.2 GB
🔸 Sixth expansion Evercold arrives January — an SD card is now a necessity
🔸 First month is subscription-free while servers stabilize

Square Enix now holds every size record on Switch 2. Apparently competing against themselves. The date was confirmed by director Naoki Yoshida at Fan Festival 2026 in Berlin — in full Bastion armor, as IGN reports.

🛫 Two oceans, no stops, one very long day

The new Airbus A350-1000ULR just flew Melbourne to Toulouse in 24 hours and 25 minutes — across the Pacific and Atlantic, covering 12,460 nautical miles nonstop.

This is a rehearsal for Qantas's Project Sunrise: the airline's plan to run the world's first nonstop commercial flights between Sydney and London or New York. Twelve jets ordered, tickets from 2027.

An extra rear fuel tank holding 20,900 litres adds 1,000 nautical miles of range to make it possible. The outbound leg — Toulouse to Melbourne — took 19 hours 13 minutes and was considered the warm-up. It also passed.

Ars Technica

📌 Daily Recap · Jul 30

⚽ Zidane finally takes the France job officially
🔍 Durov now faces a terrorism charge in France
🔓 A missing tag exposed hundreds of Claude chats
🎮 Marvel fighter breaks Steam genre record at launch
🚨 Russia labels Durov a terrorist and extremist officially
💾 FF14 on Switch 2 eats half your storage
🛫 Airbus flew Melbourne to Toulouse nonstop in 24 hours

Someone in your orbit had a long day and missed all of this — send it their way

канал