#браузерные-расширения
-
Twitch Extension Leaked OAuth Tokens of Nearly 31,000 Users
The malicious browser extension “Twitch Enhanced Viewer | JeetBot” forwarded viewers' session tokens to the proxy servers of a commercial bot service — except for the sessions of ten Russian streamers.
-
Adobe Acrobat's Chrome Extension Exposed WhatsApp Web Chats
The HermeticReader vulnerability let any malicious site read WhatsApp Web conversations through the Adobe Acrobat extension — with no password, no cookies and no user interaction. Adobe has already shipped a fix.
-
A vulnerability in the Claude for Chrome extension lets malicious plugins control the AI
Researchers have found a vulnerability in Anthropic's Claude for Chrome browser extension that lets third-party malicious extensions trigger predefined AI actions. This opens the door to abusing Claude's access to connected services.
-
Vulnerability in Claude for Chrome Lets Third-Party Extensions Read Gmail
Researchers have discovered that a malicious browser extension can use Claude for Chrome to access a user's Gmail, Google Docs and Calendar. Exploitation requires an extension already capable of running scripts on the claude.ai site.