Anthropic unleashes claude cowork to run your pc while you sleep
Anthropic just handed its flagship ai the keys to your digital life. Claude Cowork, released quietly overnight, can now open your inbox, pull sales dashboards, nag teammates on Slack and ping results to your phone—without a human clicking once. The catch: the same bot that summarizes your day can also rifle through folders you never meant to share.
The new feature turns claude into a background worker
Where classic chatbots wait for prompts, Cowork flips the script. Users write a plain-English goal—‘collect overnight metrics and alert me only if churn spikes’—and Claude spins up a headless browser session on Anthropic’s servers. It logs in, scrapes, calculates, then messages a digest to the mobile app. Think cron job with a brain, wrapped in conversational English.
Early testers inside four Fortune-500 pilots have already scheduled morning email sweeps that annotate every thread mentioning budget overrides. One fintech beta saw Claude auto-populate a Google Sheet with Jira ticket velocities and post the link to a private Teams channel before 7 a.m. ET. The company claims median task completion time of 4.3 minutes, roughly a 10-fold speed-up over human interns.
Phone tether opens a fresh attack surface
The mobile bridge is the twist that keeps security folk awake. After finishing a desktop routine, Claude can push a notification that asks ‘Approve transfer of Q3_forecast.xlsx to your phone?’ Tap yes and the file lands in a sandboxed Anthropic folder. Deny, and the session halts. The opt-in flow sounds reassuring—until you realize the same channel can exfiltrate any doc the model can see.
Off the record, a red-team contractor told TechFlux the demo leaked a dummy medical record in 18 seconds after the user mis-spelled a folder name. Anthropic admits the beta ‘may misinterpret scope’ and explicitly tells companies to wall off payroll, cap table or HIPAA data. Translation: we ship fast, you police the blast radius.
The extension also demands blanket screen-reading permission on Windows and macOS, a privilege even seasoned sysadmits rarely grant. Once approved, Claude can click ‘download’ on any phishing link that reaches the inbox it’s supposed to police. The threat model isn’t theoretical; last week’s SysAdmin audit found 230 Cowork sessions alive on expired OAuth tokens across 12 pilot firms.
Data stays local—except when it doesn’t
Anthropic’s white paper promises ‘privacy-first local orchestration,’ meaning prompts and intermediate clicks never leave the virtual container. Yet telemetry logs still flow back to San Francisco for ‘safety review.’ EU customers already bristle: one German bank suspended its pilot until a data-processing addendum is signed. Regulators in Bavaria want to know if transcribed desktop frames count as biometric data under GDPR.
Inside the codebase, Cowork’s memory buffer keeps a rolling 24-hour snapshot of every window title, URL and clipboard snippet. Users can purge it manually; otherwise deletion happens after 30 days. Security veteran Moxie Marlinspike summed up the vibe in a terse Mastodon post: ‘Your ai intern keeps a diary. Good luck redacting it.’
Competitors race to catch up
OpenAI’s Operator project and Google’s Jarvis prototype both target agentic workflows, but neither has reached private beta. Microsoft’s Copilot Studio already automates PowerPoint builds, yet it stays locked inside the 365 tenant. By letting Claude roam the wild west of the open web, Anthropic bets that speed, not sanctuary, will win enterprise contracts before lawmakers react.
The pricing signals the same land-grab urgency: Cowork hours cost the same as regular Claude-3 prompts for now. Once the novelty fades, Anthropic will meter compute by the minute. Early adopters are stuffing queues while the tariff clock is frozen—exactly the playbook Uber used to colonize city streets before regulators noticed.
Bottom line: Anthropic shipped a digital doppelgänger that can book your calendar and bankrupt your company in the same breath. The tool is live, the disclaimers are loud, and the fuse is lit. Fortune favors the brave—and the heavily insured.