
- Koi Security discovers ShadowPrompt zero-click flaw in Claude Code Chrome extension
- Vulnerability let attackers exploit XSS on claude.ai subdomain to exfiltrate secrets without user interaction
- Anthropic patched issue in version 1.0.41; researchers warn AI browser assistants are high-value attack targets