Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

'No clicks, no permission prompts. Just visit a page, and an attacker completely controls your browser': Experts warn Claude Chrome extension could let hackers hijack your online browsing

Mobile phone displaying a Claude login screen.

  • Koi Security discovers ShadowPrompt zero-click flaw in Claude Code Chrome extension
  • Vulnerability let attackers exploit XSS on claude.ai subdomain to exfiltrate secrets without user interaction
  • Anthropic patched issue in version 1.0.41; researchers warn AI browser assistants are high-value attack targets
Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.