Claude threat report

Cybercriminals are targeting Anthropic Claude users by deploying information-stealing malware to harvest authenticated session cookies and authentication tokens from browsers. Successful theft bypasses multi-factor authentication and allows attackers to access sensitive organizational conversations, proprietary code, and confidential prompt histories within active Claude sessions. Organizations are advised to enforce short session timeouts, deploy endpoint protections against infostealers, and educate staff against pasting sensitive information into conversational interfaces.

• Weekly Cybersecurity Newsletter Bulletin - CrowdStrike Falcon, C(opens in a new tab)
• ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain(opens in a new tab)