Researchers warn of data exposure risks in Claude Chrome extension

On December 18, 2025, Anthropic released the beta version of its Claude Chrome extension, a tool that lets the AI browse and interact with websites on your behalf. While convenient, a new analysis from Zenity Labs shows it introduces a serious set of security risks that traditional web protections weren’t designed to handle.

Web security has mostly assumed there’s a person behind the screen. When you log into your email or bank, the browser treats the clicks and keystrokes as yours. Now, tools like Claude can click, type, and navigate sites for you.

Researchers Raul Klugman-Onitza and João Donato noted that the extension stays logged in at all times, with no way to disable it. That means Claude inherits your digital identity, including access to Google Drive, Slack, or other private tools, and can act without your input.

Read more at HackRead