I asked my claude about this and it said it had shared my email 10+ times this month… including to the SEC
Another vulnerability few are talking about: I found my Claude Code exposing personal data in http headers because the sites it curled politely asked agents to identify their users 😊 Epistemic cybersecurity is the hot new category for 2027.