ClaudeBleed Vulnerability Lets Hackers Hijack Claude Chrome Extension to Steal Data
2026-05-08T20:51:43Z•b7c714e8e909997bc39ded16809e0ba234f7dc995660d570ddfcd88ed6f9cd21
ai-email-filtersbeagle-malwarecanvas-lmschrome-extensionclaudeclaudebleedcvss-10data-breachedge-browsergemini-cligoogle-chromeinstructuremalvertisingosintphishingplaintext-passwordsransomware-riskshinyhunterssupply-chainvimeo
What happened
Multiple high-risk incidents reported: a ‘ClaudeBleed’ vulnerability in the Claude Chrome extension can bypass guardrails to exfiltrate Google Drive and Gmail data; a malvertising campaign uses a fake Claude site to deliver a new Beagle backdoor; Microsoft Edge reportedly loads saved passwords into RAM as cleartext; allegations that Google Chrome silently installs a 4GB Gemini Nano model on user devices; Google patched a CVSS 10 Gemini CLI vulnerability that enabled GitHub-issue-based RCE and supply-chain compromise; ShinyHunters breached/defaced Instructure’s Canvas LMS and Vimeo, impacting/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- b7c714e8e909997bc39ded16809e0ba234f7dc995660d570ddfcd88ed6f9cd21
- Enrichment time
- 2026-05-08T20:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.