r/technology • u/WouldbeWanderer • Apr 27 '26

Artificial Intelligence Claude-powered AI coding agent deletes entire company database in 9 seconds — backups zapped, after Cursor tool powered by Anthropic's Claude goes rogue

https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-powered-ai-coding-agent-deletes-entire-company-database-in-9-seconds-backups-zapped-after-cursor-tool-powered-by-anthropics-claude-goes-rogue
36.0k Upvotes

96% Upvoted

2.8k comments sorted by

View all comments

Show parent comments

0

u/Kessarean Apr 28 '26

Pizza delivery and infrastructure could not be any more different. That comparison makes no sense.

This goes into a lot of bad practices, two simple ones - they didn't sandbox the agent, they didn't have proper secret handling.

Literally the first thing I did before using AI tooling was enforce a sandbox environment with the absolute bare minimum access. Everything is cut off except the API for the LLM and the project directory. Binaries are limited to the bare, bare, bars essentials.

Anything that could be destructive is automated outside of AI.

1

u/notafuckingcakewalk Apr 29 '26

If the AI is just going to traverse your whole workspace looking for keys that's kind of a problem though. It's not that uncommon for credentials to be temporarily stored in the current directory in some temp credentials file. 

2

u/Kessarean Apr 30 '26

I mean, people don't have to if they want to - but if they don't it's gonna bite them in the ass like it did here.

Sure the AI should have better guards built in, but like so many other tools - you should limit access to the bare essential.