Researchers say a flaw in Claude Code’s Chrome extension let any browser extension hijack AI actions – and Anthropic’s patch was bypassed in just 3 hours.
Piloting Claude in Chrome | Claude
We're piloting Claude in Chrome to test browser-based AI capabilities while addressing prompt injection risks and building the safety measures needed before wider release.
[🐛 Bug]: Chrome team removes `--load-extension` switch on Chrome builds · Issue #15788 · SeleniumHQ/selenium
Description They remove --load-extension that cause .AddExtensions() and other similar method broken their commit https://chromium.googlesource.com/chromium/src/+/290ed8046692651ce76088914750cb659b...
Claude for Chrome | Claude
Bring Claude's AI assistance to your browser. Ask questions, analyze data, automate tasks, and navigate sites in Chrome. Works with Claude Code and Desktop.
Stronger with every update: How we’re making Chrome and the web safer in the AI Era
Chrome uses Gemini AI to automate vulnerability discovery, triage, and patching, accelerating updates to match modern security risks.
Is Claude Code Secretly Installing Spyware?
A researcher caught Claude Desktop installing browser bridges silently. Plus the MCP RCE Anthropic won’t patch.
Built-in AI | AI on Chrome | Chrome for Developers
Browser extensions turn nearly 1 million browsers into website-scraping bots
Extensions load unknown sites into invisible Windows. What could go wrong?
First hackathon win into a browser extension which is open-sourced: Continuum — capture any AI chat and resume it in a new one instantly with full context (Claude, ChatGPT, Gemini, & more).
Hi everyone! I just wanted to share my recent project Continuum, which started out as my first hackathon win that is now a published extension on…
Decoupling Extensions from Chrome: The Journey to a Modular Extensions Layer · Issue #74 · Igalia/webengineshackfest
Facilitator(s) @MyidShin @ltilve Summary This talk presents the ongoing effort to decouple Chromium Extensions from the Chrome layer, enabling a more modular and embeddable architecture. We’ll cove...
Introduction to Google Chrome Extensions
Shayan on Twitter / X
I just tried the Dia browser for a few minutes.I'm sorry, but this is most likely ngmi.It's basically Chrome, with an AI chat built in that could've been a Chrome extension.I don't see much of a value prop here, and don't understand why this couldn't have been added to Arc.— Shayan (@ImSh4yy) April 8, 2025
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code
Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to China-based servers.
Microsoft Struggling With Hundreds of AI-Discovered Security Bugs — ProPublica
Anthropic’s Mythos has flagged bugs faster than Microsoft can fix them. Documents reviewed by ProPublica reveal the tech giant's “mad dash” behind the scenes to patch holes before hackers can find and exploit them.
AI vs human code gen report: AI code creates 1.7x more issues
We analyzed 470 open-source GitHub pull requests, using CodeRabbit’s structured issue taxonomy and found that AI generated code creates 1.7x more issues.
Trust Me, I’m Local: Chrome Extensions, MCP, and the Sandbox Escape
Trust Me, I’m Local reveals how Chrome extensions and MCP abuses enabled sandbox escapes, exposing users to major security vulnerabilities.
Forget the Fate of Chrome, Focus on the Fate of the Browser
In debating what undoubtedly won't happen, we're looking past some key things that are -- and might...
