This week's Wild West roundup:

This LLM worm was reported to Microsoft months ago, but it's not possible to patch.

"Untrusted content in a Claude Cowork session can escape the VM it's sandboxed in and read and write files anywhere on your Mac."