'The bypass is still six lines of JavaScript'

Anthropic’s Claude extension flaws allow fake clicks to launch sensitive AI workflows Researchers found vulnerable handlers unchanged across eight extension updates Synthetic clicks bypassed checks designed to confirm real user actions…