TLDR Tech / InfoSec
The Memory Heist
Claude's memory and web tools can be chained to leak a user's name, employer, and hometown to a hostile site without any visible warning. A researcher built an alphabet 'keyboard' on a controlled domain so the model spells out personal data letter by letter in URLs whenever it browses there. A coffee shop façade plus user‑agent routing hid the attack from humans while targeting Claude specifically. After disclosure, Anthropic restricted link‑following in web_fetch, but similar memory‑driven exfiltration risks remain for other connected data sources.
Read the full story