Hazmat is a free, open-source containment tool for running AI coding agents without exposing an administrator’s normal user account, SSH keys, or cloud credentials. It creates a separate local account, limits access to a selected project, and wraps agents including Claude Code, Codex, OpenCode, and Cursor Agent.

Source

Attackers are exploiting CVE-2026-65400 in macOS Screen Sharing to obtain root access and install Monero cryptocurrency miners on exposed Macs. A working exploit was reportedly developed from Apple’s patch in about four hours, increasing the risk that more attackers will target systems with TCP port 5900 reachable from the internet. Internet-exposed Macs are at greatest risk

Source

OpenAI’s Computer History feature can leave users’ recorded Mac activity in unencrypted Markdown files, even though its temporary event data is deleted after 48 hours. The opt-in feature tracks Mac work without screenshots, turning clicks, keystrokes, app switches, and other accessibility events into memories that ChatGPT and Codex can reuse.

Source

OpenAI’s new Computer History feature gives ChatGPT a searchable timeline of activity across Mac apps and websites, letting users recover context from earlier work without taking continuous screenshots. It is opt-in and available to Pro, Business, and Enterprise subscribers, but its ability to summarize workplace activity creates an important privacy consideration for organizations.

Source

Chrome is testing Device Bound Session Credentials (DBSC), a protection that makes stolen session cookies unusable on supported Windows and macOS devices. The feature ties each browser session to a private key protected by the device’s TPM or Secure Enclave.

Source

Apple has released macOS 27 Golden Gate beta 5 to developers as build 26A5406e, roughly two weeks after beta 4. The update appears focused on bug fixes, performance, and refinement rather than introducing a major new feature.

Source

Microsoft Entra ID will soon treat Windows Hello for Business and macOS Platform Single Sign-On (PSSO) as standalone multifactor authentication credentials. Starting in October 2026, users will no longer need an additional passkey or authentication method for many step-up and sign-in challenges.

Source

Apple’s incoming CEO John Ternus is beginning to reshape the company’s leadership team ahead of his September 1 succession of Tim Cook. His first reported moves include bringing retired hardware executive Laura Legros back to Apple, promoting chip chief Johny Srouji to lead hardware engineering, and taking a more active role in the company’s design organization.

Source