ShadowPrompt: Zero-Click Prompt Injection Chain in Anthropic’s Claude Chrome Extension
ShadowPrompt: Zero-Click Prompt Injection Chain in Anthropic’s Claude Chrome Extension A vulnerability chain nicknamed ShadowPrompt affected Anthropic’s official Claude Google Chrome extension. Simply visiting a malicious webpage could allow an attacker to inject prompts into Claude as if the user typed them. This matters because routine browsing can become an AI control-plane risk, especially for […]