Claude Vulnerabilities Allow Data Exfiltration and User Redirection to Malicious Sites

Three chained vulnerabilities in Claude.ai, Anthropic’s widely used AI assistant, that together allow attackers to silently exfiltrate sensitive conversation data and redirect unsuspecting users to malicious websites, all without requiring any integrations, tools, or MCP server configurations. The vulnerability chain, collectively dubbed Claudy Day, was responsibly reported to Anthropic through its Responsible Disclosure Program, and […]

The post Claude Vulnerabilities Allow Data Exfiltration and User Redirection to Malicious Sites appeared first on Cyber Security News.