Anthropic on Tuesday launched Claude Cowork on mobile and web, expanding a tool that has quietly become the company’s bridge between the developer-centric world of AI coding agents and the far larger market of knowledge workers who never open a terminal.

The rollout, which begins in beta with Max subscribers before expanding to additional plans, marks a strategic inflection for Anthropic. It transforms Cowork from a desktop-only agent into a cross-device platform where tasks can start on a laptop, continue autonomously in the background, and be reviewed from a phone — even after the user closes the app entirely.

“Your work goes everywhere with you, and keeps going without you,” Anthropic writes in its announcement.

The timing is deliberate. Alongside the mobile launch, Anthropic published usage data from 1.2 million anonymized Claude Cowork sessions sampled between May 11 and May 31, drawn from more than 600,000 organizations. The data paints a striking picture: the overwhelming majority of what people do with Cowork has nothing to do with writing software.

The biggest AI story nobody’s talking about

The numbers tell a story that cuts against the dominant narrative in enterprise AI, which has fixated on coding assistants and developer productivity as the primary use case for large language models.

Business process and operations — tasks like pulling scattered updates into a single report, building onboarding checklists, and reconciling spreadsheets — accounted for 33.4% of all sampled Cowork sessions, making it the single largest category by a wide margin. Content creation and copywriting — producing drafts, slide decks, posts, and proposals — came in second at 16.4%.

Together, those two categories make up roughly half of all Claude Cowork usage. Software development, by contrast, accounted for just 8.7%. DevOps and infrastructure followed at 7%, with research and intelligence at 6.4%, data analysis and business intelligence at 5.8%, document processing and extraction at 4.1%, and sales and revenue operations at 4%.

The remaining 12 categories each represented less than 4% of usage, including personal assistance at 3.8%, education at 2.4%, and meeting intelligence at 1.8%.

Anthropic describes these dominant use cases as “the work around the work” — tasks that span nearly every role in an organization but rarely appear in anyone’s core job description. “People are using it for a variety of tasks that aren’t necessarily the hallmark of a specific role, but instead represent the connective work around a role that moves projects forward and keeps businesses running,” the company writes. “That means tasks like drafting a status update, building a slide deck, or condensing reams of research into a single report.”

That phrase — “the work around the work” — is Anthropic’s attempt to define and claim an entirely new category of AI productivity. It’s a calculated reframing: rather than positioning AI as a tool that replaces what professionals do, Anthropic is arguing that the most valuable current application is handling everything professionals do around their actual expertise.

What mobile access changes — and what it doesn’t

The expansion to mobile and web introduces three concrete capabilities that reflect how Anthropic envisions Cowork fitting into daily workflows.

First, sessions now sync across devices. A user can start a task at their desk, check on its progress from a phone, and retrieve the finished output from any device. Second — and arguably more significant — Cowork can now run tasks in the background with no device online at all. Users can schedule work for a specific time, and Claude will execute it autonomously. Anthropic offers the example of setting Monday morning client prep for 6 a.m.: “Claude works through the email threads, transcripts, and recent news, builds the briefing doc, and leaves the follow-up email drafted but unsent. Review it over coffee.”

Third, when Claude encounters a decision that requires human judgment, it surfaces the question to the user’s phone. “Nothing ships until you’ve reviewed and approved it,” Anthropic states.

Desktop remains the most fully featured surface, with access to local files and the browser. But the web version also opens Cowork to users who cannot install a desktop application — a meaningful expansion in enterprise environments where IT departments control software installation.

The company also unified its interface: on web and desktop, chat and Cowork now share a single home screen, and projects and artifacts persist across both modes.

To encourage adoption, Anthropic is extending doubled Cowork usage limits through August 5.

The strategic logic: why Anthropic is chasing the non-developer

The usage data and the mobile launch together reveal a company executing a two-track strategy. Claude Code, its terminal-based coding agent, dominates among software developers. But Cowork is designed to capture the vastly larger population of professionals whose work involves creating, organizing, and communicating information rather than writing code.

The contrast between the two products is instructive. As Anthropic notes, Claude Code “is most often used by software developers for the key parts of their role: building, debugging, and shipping code.” When developers do use Cowork, they tend to use it not for programming but for the communications-focused work that surrounds every role — status updates, documentation, and coordination.

This pattern — where AI handles the connective tissue of work rather than its core substance — aligns with what Anthropic describes as people using “Claude Cowork to assemble and structure the information they can use to act on their expertise.” The company illustrates this with three examples: a lawyer using Cowork for document formatting and filing while reserving legal judgment for themselves, a hiring manager synthesizing interview feedback while spending more time on candidate conversations, and a team lead producing a slide deck that explains a decision while focusing on actually making that decision.

The implications for Anthropic’s business model are significant. Developer-focused tools, while high-profile, serve a relatively narrow market. The Ramp AI Index published in May showed Anthropic pulling ahead of OpenAI in business adoption for the first time — with 34.4% of firms paying for Anthropic’s services compared to OpenAI’s 32.3% — and suggests the company’s enterprise push is gaining traction. Claude Code was identified as the primary driver of that shift. But Cowork targets an addressable market that is orders of magnitude larger: every knowledge worker with a laptop, a pile of spreadsheets, and a slide deck due by Friday.

A crowded field gets more competitive

The mobile launch arrives during one of Anthropic’s busiest — and most turbulent — stretches in its history.

Just last week, Anthropic launched Claude Sonnet 5, a new model that narrows the performance gap with its more expensive Opus-class models while maintaining lower pricing. The model is available at introductory pricing of $2 per million input tokens through August 31 before rising to $3 per million input tokens. Sonnet 5 serves as the engine underneath Cowork, and its improved agentic capabilities — better reasoning, tool use, and sustained task completion — directly enhance Cowork’s ability to handle complex, multi-step workflows.

Two weeks before that, Anthropic released Claude Tag, a Slack-native AI agent designed for team collaboration. Where Cowork focuses on individual task delegation, Claude Tag operates as a multiplayer tool — a single Claude identity that everyone in a Slack channel can interact with, building context from conversations over time. 

According to Anthropic’s announcement, 65% of the company’s own product team’s code is created by its internal version of Claude Tag. Fortune reported that Anthropic’s head of product for Claude Code and Cowork, Cat Wu, described the distinction: “Claude Code, Cowork, and chat are very single-player, whereas Claude Tag is built to be interactive and multiplayer.”

Together, Cowork and Claude Tag represent a pincer strategy: Cowork captures individual productivity workflows across devices, while Claude Tag embeds AI into team communication channels. Both are designed to push Anthropic deeper into enterprise operations, beyond the developer seat.

The security question looms

The expansion also arrives against a backdrop of unresolved security concerns. On July 1, security firm Armadin — led by Mandiant founder Kevin Mandia — published research detailing what it described as a full sandbox escape in Claude Cowork on Windows, as reported by SiliconANGLE. The attack chain involved DLL sideloading against the Claude desktop executable to gain trusted access to Cowork’s virtual machine service, then exploiting undocumented parameters to achieve root access and bypass network restrictions.

Anthropic responded that the vulnerability did not qualify as a security issue because exploiting it requires an attacker to already have local code execution on the host machine. Armadin, however, raised a broader concern: that deploying local virtual machines on nontechnical users’ systems creates visibility gaps that endpoint security products struggle to monitor.

This tension takes on new dimensions as Cowork moves to mobile and web. The web and mobile versions run tasks server-side rather than in a local virtual machine, which eliminates the specific attack surface Armadin identified but introduces different questions about data handling, especially for scheduled background tasks that process email threads, calendar data, and documents without real-time user oversight.

Anthropic’s announcement states that “the decisions still come to you” and that nothing ships without review and approval. But as Cowork takes on increasingly complex autonomous workflows — processing contract folders, building client briefings from multiple data sources, drafting emails — the surface area for prompt injection and data exposure grows correspondingly. 

When Cowork first launched in January, TechCrunch reported that Anthropic explicitly warned about prompt injection risks, noting in its blog post: “These risks aren’t new with Cowork, but it might be the first time you’re using a more advanced tool that moves beyond a simple conversation.”

As Anthropic courts enterprises, geopolitics complicates the pitch

Anthropic’s enterprise push is also colliding with geopolitical reality. CNBC reported Monday that Alibaba will ban employees from using Anthropic’s AI tools starting July 10, placing Claude Code on a high-risk software list. The move followed Anthropic’s June letter to the U.S. Senate accusing Alibaba of carrying out what it called “the largest known distillation attack” against its models.

The Alibaba ban, combined with reports that Anthropic is closing loopholes that allowed Chinese companies to access Claude through third-country entities, underscores the increasingly fraught environment for AI companies attempting to serve global enterprise customers while navigating U.S. export and security restrictions.

At the same time, Anthropic is investing massively in infrastructure. Reuters reported Monday that Anthropic signed a $19 billion, 20-year lease with TeraWulf for a data center being built in Hawesville, Kentucky, with 401 megawatts of computing power expected to become fully operational in 2028.

That kind of capital commitment only makes sense if the company expects enterprise demand — not just from developers, but from the millions of knowledge workers that Cowork targets — to grow dramatically.

Anthropic’s own usage report comes with notable blind spots

Anthropic is transparent about the limitations of its usage analysis. The taxonomy classifies sessions by the type of work being performed, not by the job title of the person doing it. 

There are no standalone categories for marketing, finance, or HR — functions that are likely absorbed into the dominant “business process and operations” bucket, which may partly explain why that category commands a third of all usage.

The sample is also rate-capped rather than proportional to traffic, meaning the numbers are shares of sampled sessions, not absolute volumes. Usage during peak hours is somewhat underrepresented. And roughly 5% of sampled sessions involved personal, non-work use — hobbies, personal assistance, and companionship-style conversations — meaning the data doesn’t purely reflect workplace activity.

The company also acknowledged that its labeling pipeline changed around May 11, which is why the analysis window begins on that date rather than covering a longer period.

What Cowork’s rise says about the future of enterprise AI

Anthropic’s mobile launch and usage data arrive at a moment when the enterprise AI market is shifting from proof of concept to proof of value. The question facing every company deploying AI tools is no longer whether the technology works — but whether it delivers measurable productivity gains across an organization, not just within engineering teams.

The usage data suggests that the answer, at least for Cowork, is emerging in an unexpected place. It’s not in the glamorous work of building software or conducting research. It’s in the unglamorous, universal labor of turning messy information into structured outputs that move organizations forward — the status reports, the onboarding checklists, the variance memos, the client decks.

By untethering that capability from the desktop and making it available on every device, Anthropic is betting that the most valuable AI agent isn’t the one that writes code. It’s the one that handles everything else.

Ever since Meta launched its first smart glasses developed in collaboration with Ray-Ban, they have built a reputation as a creep’s weapon. The outrage is justified, as a lot of people are not comfortable being recorded or captured without being told about it. Now, Meta is taking concrete steps to make sure that the camera-equipped smart glasses do not violate any person’s privacy. To that end, the company has announced that it will disable the onboard camera on its smart glasses if someone covers or tampers with the white LED indicator light.

What’s happening?

Meta argues that the white LED indicator serves as an alert signal for any other person who might be in the field of view. “We are continuouslyimproving our ability to detect tampering, and now we’re updating the glasses to disable the camera if they detect the LED was physically tampered with or destroyed. No other kind of camera has done this, and we’re proud to lead the industry forward,” the company said in an official announcement.

Meta says that it is updating the smart glasses to ensure that if the LED system is physically disabled or covered, the camera will be entirely disabled. The change will be first implemented on the second-generation Meta smart glasses. To recall, Meta now offers smart glasses that have been developed in collaboration with Ray-Ban and Oakley. Just over a week ago, the company also introduced an in-house line-up that was developed without any third-party brand collaboration and with a lower asking price, as well.

Better late than never

Over the past few months, numerous reports have uncovered an underground market where owners of the Meta AI smart glasses can get the LED indicator lights disabled. Numerous listings have also been spotted on online platforms where such services have been offered. Meta is going to take action against such activities, as well.

Meta says that it is not only going to disable the camera capture on devices with a tampered or obstructed LED light. Going a step ahead, the company will remove all the ads, posts, and online listings on its platform that advertise such services. Additionally, the company says it will also be implementing a ban on accounts that offer such services and hopes to take legal action against entities or businesses that are doing it.

Bitluni has spent years pushing DIY electronics further than most people expect. His earlier clusters packed a few hundred small RISC-V chips onto compact boards and proved they could outperform a regular desktop processor on certain tasks while using almost no power. That success led him to ask what would happen if he kept scaling. The answer sits on his bench now: an ultra cluster built around 8,192 individual microcontrollers running at 100 MHz, managed by 256 larger controller chips.

The primary goal here wasn’t even to match a high-end graphics card for 4K gaming, as Bitluni preferred a much more minimalist approach. He reasoned that each cheap CPU was only required for one location on a display, allowing the individual chip to figure everything out on its own; merely connect them and you have a makeshift graphics system. It sounds strange, but in theory it is perfectly possible; simply take a lot of 13-cent chips and convert them into the foundation of a new graphics system. Bitluni chose the CH570 microcontroller because it fits the bill perfectly: it’s fast enough to perform the job, has 12 kilobytes of memory, and a hardware multiplier to boot, all for roughly 13 cents in bulk.

Building at this magnitude revealed some issues that are not typically encountered on smaller projects. One item that failed was using a shared clock signal, which became overwhelmed and stopped operating when there were thousands of chips on the board, so now each microcontroller has its own crystal oscillator. Packing all of those signals onto the board resulted in crosstalk, so they switched to six-layer boards with ground planes on the inner layers and staggered the traces so that signals from adjacent levels did not bleed over into each other. The physical shape, one large board, was simply too large to manufacture, so they divided it into modular blades. Each of these blades is simply a grid of CPUs and small RGB LEDs; simply slide them into the central circular backplane with edge connectors, and it resembles a modern art sculpture rather than normal computer hardware.

Getting power and keeping the thing cool turned into complete engineering projects on their own. With so many tiny chips running at 3.3v generating hundreds of amps, they need a 3kW power supply and efficient buck converters to keep everything going smoothly. The current version 1 still uses powerful fans rather than the immersion cooling tank that they had planned to employ. Programming the thing would have taken weeks if done by hand (which is insane, just think about it!), so they ended up modifying a 3D printer, installing some pogo pins on the gantry, and writing Python scripts that simply move the head across each board and flash the firmware through the exposed pads.

Right now, it’s running pretty well, as they have a decent light show going on with synchronized patterns spanning over a thousand processors, each driving its own 1mm x 1mm RGB LED, and it looks pretty cool when the blades light up in succession or in waves. They’ve even begun experimenting with distributed ray marching, which is the same method used in some of those fancy real-time rendering demos. Once they have a few more blades online, they will conduct some real testing.

The communication side of things is simply SPI buses, with each set of 32 worker chips sharing one bus, and the larger controllers handling the real coordination. The bandwidth is limited, so it will not be able to push high-resolution frames as quickly as a dedicated GPU – but that was never the goal of this project. It’s more about demonstrating how far you can push an idea when you have low-cost parts and open designs for others to follow along. Once the project moves on to the next step, the files and code will be made public.
[Source]

OpenAI’s chief futurist, Joshua Achiam, notified colleagues on Tuesday that he is leaving the company later this month after nearly nine years, WIRED has learned. Achiam, who previously led a team tasked with upholding the organization’s nonprofit mission, told OpenAI staff that his departure was not motivated by any specific reason, but was something he’s been thinking about for a while.

“The world is in on the secret now and it feels possible to work on the mission from outside the walls of a frontier lab,” Achiam said in a note to staff obtained by WIRED. “I believe we can get to a world of peace, unprecedented prosperity, and unimaginable possibilities, social and scientific. Whatever I do next, I will continue to work with you on making this vision real.”

OpenAI has not yet announced if anyone will fill Achiam’s role, which sat at the intersection of the company’s AI safety and policy teams, and involved studying the potential harms and benefits caused by the rise of artificial intelligence. Achiam worked with senior company leaders, including global affairs chief Chris Lehane, to advocate for government regulations aligned with OpenAI’s mission: to ensure that AGI benefits all of humanity.

OpenAI has reorganized its safety, product, and research teams numerous times since ChatGPT launched in 2022, after which the company grew rapidly from a small research lab into a massive tech company. In 2024, OpenAI announced the formation of a “mission alignment team” led by Achiam that was tasked with upholding the company’s mission. OpenAI disbanded the group in February and announced that Achiam would be taking on a new role as chief futurist.

In the last year, OpenAI has worked to bridge the gap between its AI research and policy teams as part of an effort to develop rules and standards that anticipate where its technology is headed. As the two departments began collaborating more closely, several OpenAI researchers, including Boaz Barak, Noam Brown, and Adrien Ecoffet say they have become more involved in policy work.

Former White House AI adviser Dean Ball started at OpenAI this week as the company’s head of strategic futures, and he will briefly overlap with Achiam. Ball is also expected to work with researchers and policy leaders in his role.

Achiam is the latest safety-focused leader to depart OpenAI, joining a growing list of exits as the company prepares to go public. Jan Leike, who co-led OpenAI’s Superalignment team researching how to keep advanced AI models under human control, left to join Anthropic in 2024.

That same year, head of policy research Miles Brundage and Steven Adler, who led research on dangerous capabilities of AI models, both departed OpenAI to found nonprofits that advocate for AI labs to adhere to strong safety and security standards. Andrea Vallone, who led OpenAI’s research on how ChatGPT should respond to users experiencing mental or emotional distress, left to join Leike’s team at Anthropic at the end of 2025.

After joining OpenAI as an intern in 2017, Achiam went on to become a research scientist focused on AI safety. He was known internally as a stalwart defender of OpenAI’s safety-focused mission, but was also controversial for his occasional criticisms of the broader AI safety community.

Earlier this year, he testified in federal court that he interrupted Elon Musk’s parting speech when he left OpenAI in 2018, remarking that the then-billionaire’s plan to develop AGI at Tesla could come at the expense of safety. Musk allegedly responded by calling Achiam a “jackass,” a moment that Dario Amodei (now the CEO of Anthropic) and David Luan (who went on to become the head of Amazon’s AGI lab) commemorated by gifting Achiam a statue of a golden donkey’s rear end, inscribed with the words, “Never stop being a jackass for safety.”

IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company.

“We are aware of this isolated matter, and we have remediated its source. There is no impact to Accenture operations and service delivery,” Accenture told BleepingComputer.

Accenture is a global professional services company that provides consulting, technology, cloud, engineering, and managed services to businesses and governments worldwide.

The statement comes after a threat actor known as “888” claimed to have stolen 35 GB of data from the company in July and began offering the data for sale on a cybercrime forum.

“Today I am selling the Accenture Data Breach, thanks for reading and enjoy!,” reads the forum post.

“In July 2026, Accenture suffered a data breach which resulted in just over 35gb of source codes getting stolen from the company.”

According to the threat actor, the data includes source code, RSA keys, SSH keys, Azure PAT (personal access tokens), Azure Storage access keys, and configuration files.

To support their claims, the threat actor shared a screenshot that appears to show them cloning an Azure DevOps repository named “121123_AtriasTalentAcademy” that was hosted under a redacted accenture.com hostname. BleepingComputer could not independently verify the full scope of the data being stolen.

While Accenture confirmed the breach, the company did not comment on the threat actor’s claims regarding the amount or type of data that may have been accessed or exfiltrated.

Accenture also did not disclose how attackers gained access or whether customer data was affected.

The same threat actor previously attempted to sell Accenture employee data following a third-party breach in 2024.

Accenture also suffered a data breach in 2021 after the LockBit ransomware gang stole data from its systems.

BleepingComputer has asked Accenture further questions about the breach and will update this story if additional information becomes available.

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Advertisement

Get the whitepaper