Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers

Summary

Forever Security researchers showed that a browser extension running scripts on claude.ai could make Claude Desktop run code on a user's computer through Dispatch, a feature for sending tasks from a phone. Dispatch accepted an ordinary signed-in claude.ai session without any visible link, so the extension could send instructions as the user. The researchers reported the flaw to Anthropic on May 14, and Anthropic reportedly said Dispatch would be retired with October as the target.

Related items

• InfoOpenAI will keep investing in AI data centers despite election results, CFO tells CNBCSame vendor · CNBC Technology
• InfoCould the US midterms burst the AI bubble?Same vendor · BBC Technology
• InfoFearing AI disruption, white-collar workers are quitting their jobsSame vendor · The Guardian Technology
• InfoPerplexity launches its own take on AI agents for workSame vendor · The Verge (AI)
• MediumFake OpenAI, SpaceX events used to steal Microsoft, Google accountsSame vendor · BleepingComputer