Stolen cookies bypass Claude's 2FA entirely

Malware-stolen session cookies let attackers into paid Claude accounts, bypassing 2FA and SSO with no way for IT to detect or stop it.

5 short cards · What happened, The big picture, Under the hood …

Also today

Today's top five AI stories, one line each, at 7am Eastern. Free. One-click unsubscribe.