Anthropic’s Claude Cowork could escape its local VM and read credentials on a Mac — Blankdot