aiqbench analysis
This vulnerability demonstrates how indirect prompt injection in AI assistants can escalate from simple data leakage to full account takeover via authenticated sessions and JavaScript execution tools. The core risk lies not just in the LLM's susceptibility, but in its ability to leverage existing browser credentials to harvest sensitive verification codes for third-party services like Slack and X. This incident highlights critical security gaps when integrating generative AI agents with high-value authentication flows within standard web browsers.
Claude in Chrome Prompt Injection Steals Gmail Codes to Hijack Slack, X, and Claude.ai Accounts
An indirect prompt injection vulnerability in Claude on Chrome can be exploited to steal email verification codes and hijack accounts on platforms like Slack, X, and Claude.ai. The attack begins with a malicious email that lands in the victim’s Gmail inbox. When the user requests Claude in Chrome to summarize recent emails, the assistant may inadvertently read […] The post Claude in Chrome Prompt Injection Steals Gmail Codes to Hijack Slack, X, and Claude.ai Accounts appeared first on Cyber Security News.
An indirect prompt injection vulnerability in Claude on Chrome can be exploited to steal email verification codes and hijack accounts on platforms like Slack, X, and Claude.ai. The attack begins with a malicious email that lands in the victim’s Gmail inbox. When the user requests Claude in Chrome to summarize recent emails, the assistant may inadvertently read…
Excerpt shown under the publisher's RSS terms · 57 words · full text and figures are on the publisher's site
Related coverage
Weekly Cybersecurity Newsletter Bulletin – Cisco and Android 0-Day, BragJack Attack, Claude Opus 5 Used to Hack OpenAI, and 20+ Stories
Cybersecurity News · Sep 21, 2026
Friendly Fire: Hijacking Defensive Cyber AI Agents for Remote Code Execution
AI Now Institute · Jul 8, 2026
BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers
Cybersecurity News · Sep 19, 2026
Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · Aug 23, 2026