Manifold Security
Coverage of Manifold Security in the Nexus archive.
- Claude for Chrome flaw could let rogue extensions access your Gmail
A security flaw in the Claude for Chrome browser extension, called ClaudeBleed, allows malicious extensions to impersonate the Claude website and force the assistant to perform unauthorized actions, such as reading Gmail or manipulating documents. Anthropic addressed some issues but researchers claim the core vulnerability remains unresolved, enabling rogue extensions to exploit permissions granted to Claude.
- Flaw in Claude’s Chrome extension allowed ‘any’ other plugin to hijack victims’ AI
A flaw in the Chrome extension for Anthropic's Claude AI model allows any other plugin to hijack victims' AI, potentially leading to unauthorized actions such as extracting files from Google Drive and sending emails on behalf of a user. The vulnerability was discovered by LayerX, a browser security firm. Researchers reported the flaw to Anthropic, but claim that only a partial fix was issued.