Claude Session Cookie Theft

Stolen Claude Cookies Bypass 2FA and Put Corporate Gmail at Risk

Anthropic invalidated Claude sessions stolen by six infostealers, exposing self-serve AI accounts and potentially corporate Gmail and Drive data access.