Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
Researchers at Manifold Security have disclosed two vulnerabilities in the Claude for Chrome browser extension that could allow rogue extensions to trigger…
Tag: Indirect Prompt Injection
GitLost Attack: Public GitHub Issue Tricks AI Agents Into Leaking Private Repo Data
Researchers at Noma Security have demonstrated a novel prompt injection attack, dubbed GitLost, that exploits GitHub Agentic Workflows to leak private repository…