Anthropic’s Claude Code exposed users’ email addresses to third-party websites through the User-Agent request header during web searches, according to a bug report filed on November 5, 2026.
Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-27834, a medium-severity Apple flaw, to its Known Exploited Vulnerabilities catalog on Wednesday.