Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke
First reported by VentureBeat ·
The signal
●○○○
Compiled by AI from VentureBeat, the single source so far
What happened
Infostealers replayed stolen Claude session cookies into paid accounts without ever touching the login page two-factor authentication guards.The accounts Anthropic flagged were card-billed, self-serve...
AI-written summary. May contain errors.
Stolen