CLAUDE COWORK EXFILTRATES FILES

Summary from the TLDR Dev newsletter

Claude Cowork is vulnerable to file exfiltration via indirect prompt injection that exploits known-but-unresolved isolation flaws, allowing user files to be uploaded directly to an attacker's Anthropic account.