Maintenance in progress

a security firm says two flaws it reported to anthropic in may remain unpatched in claude for chrome, letting a malicious extension trigger the ai agent to read gmail, calendars and documents and act without any real user approval. separately, check point research claims ai has crossed from assistant to operator — documenting live intrusions run with minimal human input and a fivefold rise in prompt-injection detections. the attack surface is no longer the software but the agent's willingness to obey whoever speaks to it.

security industry research reporting