A user just asked Claude about a coffee shop, and the assistant spelled out his name, employer, and hometown in a URL and shipped them to an attacker's site. Researcher Ayush Paul built a "keyboard" of /a, /aa, /ab links hidden behind a fake Cloudflare check. https://t.co/p4bCXZz7sp
Full content is available at the original source.
x.com