An indirect prompt-injection weakness in Claude in Chrome could be chained to account takeovers affecting Slack, X, and Claude.ai. The attack relies on Claude’s ability to execute JavaScript within an authenticated browser session after processing malicious instructions embedded in email content. Researchers Raul Klugman-Onitza and João Donato showed that a single weaponized email could become […]
The post Claude in Chrome Prompt Injection Flaw Enables Slack, X, and Claude.ai Account Takeovers appeared first on Cyber Security News.