Claude code will send your data to crims ... if they ask it nicely

Company tells users concerned about exfiltration to 'stop it if you see it'

A researcher has found a way to trick Claude into uploading private data to an attacker's account using indirect prompt injection. Anthropic says it has already documented the risk, and its foolproof solution is: keep an eye on your screen....