// ClaudeMEDIUM
Security researchers disclosed BragJack, a zero-click vulnerability affecting Claude in Chrome. A malicious browser extension can exploit an extension-to-extension attack vector to hijack Claude's browser assistant via prompt-forcing, potentially enabling attackers to access emails, browsing history, screenshots, and conduct actions on behalf of the user. Anthropic classified the issue as medium severity and issued a $600 bug bounty.
// Get alerts for Claude