
Researchers found Claude’s Chrome extension still contains vulnerabilities allowing fake clicks and permission bypasses despite Anthropic releasing multiple updates.
ClickLock bores its victims into complying and then steals all sorts of data.
The malware has been hiding in plain sight for half a decade, stealing all sorts of valuable secrets.

Telegram’s t.me domain was swept up in a global outage following US Treasury sanctions against First VPN services, causing millions of web links to break worldwide.
1Password partnership will mean Claude will never see the secrets or load them into its own memory.
Coca-Cola confirms ransomware attack on Fairlife in an 8-K form filed with the SEC.
Two young men pleaded guilty to hacking into Transport for London in 2024 and were given long prison sentences.
Chaotic Eclipse is back with a new Windows 11 zero-day called LegacyHive.
The hacker told the AI he was an authorized pentester – and the AI believed him.
TriWest suffers an attack and loses TRICARE data on some 12,000 people.