Tag: Anthropic API allowlist bypass

Claude Cowork flaw lets attackers exfiltrate user files to Anthropic

TL;DR Researchers demonstrated an indirect prompt-injection exploit that makes Claude Cowork upload user files to an attacker-controlled Anthropic account by…