Security research from Forever.https://forever.securityhttps://forever.security/blog/thisbash-claude-dispatch-browser-extension-rcehttps://forever.security/blog/thisbash-claude-dispatch-browser-extension-rceA Claude Dispatch flaw let a browser extension escape the browser and run code on the OS through Claude Desktop, even on another computer. Dispatch is being retired, but the design flaw behind it runs through other parts of the Claude suite.Wed, 04 Nov 2026 00:00:00 GMThttps://forever.security/blog/claude-code-extension-compromisedhttps://forever.security/blog/claude-code-extension-compromisedA malicious build of Anthropic's Claude Code VS Code extension, version 2.1.313, was served through Cursor's extension marketplace on October 29 and plants an SSH backdoor. How to check if you are exposed, what to remove and rotate, and what is still unknown. Updated as the incident develops.Fri, 30 Oct 2026 00:00:00 GMThttps://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsershttps://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsersCursor, GitHub Copilot, Codex, VS Code and Claude Desktop each built a browser into their AI assistant, then enriched it beyond what a normal browser allows. Those enrichments broke the browser threat model, letting a web page or a local file reach the machine behind it. Two issues remain unpatched.Thu, 29 Oct 2026 10:00:02 GMThttps://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers-technicalhttps://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers-technicalAddress Bar Spoofing, Prompt Injection, Arbitrary Code Execution & Local File Read, and more - a technical deep dive into how we hacked the embedded browsers that Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop ship natively in their AI assistants; two of the issues remain unpatched.Thu, 29 Oct 2026 10:00:01 GMThttps://forever.security/blog/hijacking-ai-agents-via-downloads-folderhttps://forever.security/blog/hijacking-ai-agents-via-downloads-folderForever caught live malware on a customer's machine attempting a new kind of attack: a file planted in the Downloads folder that turns your own AI coding agent against you. Here's how it works on Codex and Claude Code, and why the vector stays open.Thu, 22 Oct 2026 00:00:00 GMThttps://forever.security/blog/opencode-console-breach-updatehttps://forever.security/blog/opencode-console-breach-updateOpenCode says attackers reached AI provider keys stored in 1.4% of OpenCode Console workspaces. How to tell if you are affected, what to rotate, and what is still unknown. Updated as the incident develops.Sun, 18 Oct 2026 00:00:00 GMThttps://forever.security/blog/prompt-forcinghttps://forever.security/blog/prompt-forcingBreaking down a newly discovered prompt attack technique that isn't prompt injection.Thu, 24 Sep 2026 00:00:00 GMThttps://forever.security/blog/bragjack-hijacking-5-browsers-via-built-in-ai-assistantshttps://forever.security/blog/bragjack-hijacking-5-browsers-via-built-in-ai-assistantsWe hijacked the agents inside Gemini Live in Chrome, Microsoft Edge, Opera Neon, Perplexity Comet, and Claude in Chrome - using one single extensionWed, 16 Sep 2026 12:00:00 GMThttps://forever.security/blog/bragjack-attack-hijacks-every-browser-agenthttps://forever.security/blog/bragjack-attack-hijacks-every-browser-agentBragJack attack (discovered by Forever Security) allowed ordinary extensions to hijack the internal browser agent of Comet, Chrome, Edge, Opera, and Claude in ChromeWed, 16 Sep 2026 00:00:00 GMThttps://forever.security/blog/spyder-and-maxss-chrome-extension-vulnerabilities-put-millions-at-riskhttps://forever.security/blog/spyder-and-maxss-chrome-extension-vulnerabilities-put-millions-at-riskHow SiderAI and MaxAI agentic side panel extensions are vulnerable to severe cross-site vulnerabilities, allowing attackers to compromise browsers easily and entirelyWed, 10 Jun 2026 10:00:02 GMThttps://forever.security/blog/maxss-vulnerability-in-chrome-extension-leads-to-uxsshttps://forever.security/blog/maxss-vulnerability-in-chrome-extension-leads-to-uxssHow MaxiAI Chrome extension vulnerability allows arbitrary websites access extension-level permissions, leading to UXSS, arbitrary local file read (potentially), universal screenshooting, and moreWed, 10 Jun 2026 10:00:01 GMThttps://forever.security/blog/spyder-vulnerability-in-chrome-extension-leads-to-uxsghttps://forever.security/blog/spyder-vulnerability-in-chrome-extension-leads-to-uxsgHow SiderAI Chrome extension vulnerability allowed arbitrary websites to hiddenly embed other websites and trigger typing/clicking gestures within them, effectively allowing UXSG (Universal Cross Site Gesturing)Wed, 10 Jun 2026 10:00:01 GMT