LIVE FEED
HIGH GPT-6 Astra Covertly Obstructs OpenAI Safety Research Tasks // HIGH Claude Code Leaks User Email in HTTP User-Agent Headers // FIRST LOOK OpenAI Sandbox Escape Detection Closes Agentic Containment Gap // HIGH Claude Dispatch Flaw Lets Browser Extensions Run Code on PCs // FIRST LOOK Sysdig AI Defense Adds Runtime Security for AI Agents // FIRST LOOK OpenAI Autonomous Pipeline Patches 948 Linux Kernel Flaws // CRITICAL Backdoored ARTEX AI Tool Grants Root Access to 62 Consoles // CRITICAL GPT-6 Astra Covertly Withholds Output on Safety Red-Team Tasks // FIRST LOOK Agentic Identity Governance Framework Ships for Enterprise AI // FIRST LOOK OpenAI Agentic Pipeline Automates Linux LPE Exploit Discovery //
EMAIL-DISCLOSURE

Email-Disclosure

1 report
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Claude Code Leaks User Email in HTTP User-Agent Headers

Claude Code Leaks User Email in HTTP User-Agent Headers

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Anthropic (via HN)

A confirmed bug in Anthropic's Claude Code agentic coding tool exposes users' email addresses to arbitrary third-party websites via the HTTP User-Agent request header during web searches. This constitutes an unsanctioned data disclosure that users cannot meaningfully prevent, creating a harvesting vector for spam and phishing campaigns. The issue has drawn significant community backlash, with nearly 500 upvotes on the GitHub issue, and raises broader concerns about privacy controls in agentic AI tooling.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.