Claude Chrome Extension Flaw Allowed Websites Full Control
A zero-click XSS in Anthropic’s Claude Chrome Extension let websites execute arbitrary commands, exposing emails, files, and chat history to attackers until patched early 2026.
Source: Koi.ai
Read more: CyberSecBrief









