AIVentureBeatabout 2 hours ago
Stolen Claude cookies bypass 2FA and SSO
11 min read
Infostealers replayed stolen Claude session cookies into paid accounts, bypassing 2FA and SSO without touching login pages. Anthropic flagged card-billed, self-serve accounts, which no corporate identity provider governs and no admin console can sign out. The company signed affected accounts out and stripped saved payment details.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAnthropic
Summary by ByteBrief
