The adversary can reason now, and our security tools weren't built for that. Leo di Donato, who helped create Falco, the cloud native runtime security, wrote a

The adversary can reason now, and our security tools weren't built for that. Leo di Donato, who helped create Falco, the cloud native runtime security, wrote a technical deep dive into how Claude Code bypassed it's own denylist and sandbox. And introduces Veto, a kernel-level enforcement engine built into the Ona platform.