Loading story…
Anthropic expanded Claude from a chat assistant into an agent that can take actions in external services, adding live Gmail and Google Drive operations as well as a new Browser Use API tool for structured web interaction. Claude can now send, reply to, and forward Gmail messages and modify files in connected Google Drive accounts using a user’s existing Google authentication and inherited Workspace permissions; Anthropic said write actions require user approval by default and that Gmail, Drive, and Calendar connector data is not used to train models, though retrieved connector data is stored with chats on its servers.
The company also released Browser Use alongside general availability for Computer Use, the Skills API, and the Files API, giving developers a way to let Claude interact with web pages through accessibility-tree element references rather than screen coordinates. Anthropic and outside reporting warned that these capabilities raise security risks including prompt injection, parsing mistakes, unexpected navigation, and overly permissive approval settings that could result in outbound emails, altered sharing permissions, moved folders, deleted files, or unsafe browser actions; recommended mitigations include running agents in isolated containers or virtual machines, minimizing privileges, and disabling JavaScript or file uploads unless required.
Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
Anthropic announced Browser Use on Thursday, introducing a Claude API tool that uses a page's accessibility tree so Claude can interact with web elements by structured references rather than screen coordinates. The same broader release also made Computer Use, the Skills API, and the Files API generally available.
On August 18, 2026, Anthropic announced that Claude can now perform live write actions in connected Google accounts, including sending, replying to, and forwarding Gmail messages and sharing, moving, and trashing files in Google Drive. This expanded Claude from draft-only assistance to action-capable operations using the user's Google identity, with approval enabled by default for write actions.
Anthropic's pricing documentation states that the default Browser Use toolset adds roughly 6,600 input tokens to a request before screenshots, accessibility trees, and other results. This documentation is cited as part of the Browser Use release coverage.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
thenewstack.io
Open sourcecybersecuritynews.com
Open sourceplatform.claude.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Anthropic has upgraded its Claude in Chrome extension into a full **Claude Cowork** client, adding persistent sessions that carry browser conversations into a user’s Claude history and exposing saved skills and connectors directly in the Chrome sidebar. The company said the extension is designed to let users continue work across desktop, mobile, and browser environments, including browser-based internal dashboards, legacy systems, and vendor portals that do not natively integrate with Claude. Anthropic said **prompt injection** remains the primary security risk for browser-based AI agents and tied the rollout to its published research on browser-use prompt-injection defenses. The company said it has extended Claude auto-mode protections to the extension, while still requiring explicit user approval for sensitive actions such as purchases or sharing personal data. The feature is available now for **Max** and **Team** subscribers, will reach **Pro** users in coming weeks, and is disabled by default for **Enterprise** deployments unless administrators enable it and can optionally limit use to specific domains.
Aug 12, 2026
Anthropic released an update that lets **Claude** interact with third-party workplace applications *inside* the chat interface using the open **Model Context Protocol (MCP)**, reducing the need to switch between separate app tabs. The capability supports interactive embedded experiences (e.g., project boards, dashboards, design canvases, messaging) so users can view and edit content from services such as **Slack, Asana, Box, Canva, Figma, Hex, and monday.com** directly within Claude, including workflows like drafting incident communications or updating task timelines. The implementation is powered by an MCP extension described as **MCP Apps**, which allows an MCP server to provide an interactive UI that can render and accept user actions within an AI product. ZDNET characterized the move as part of Anthropic’s broader push to make Claude a primary work interface, building on earlier “connector” approaches that primarily moved data via prompts; the new approach enables more direct, app-native style interaction within the Claude conversation. A separate ZDNET piece offering general “IT playbook” guidance for the AI era does not provide substantive details about this specific Claude/MCP integration update.
Jun 29, 2026
Anthropic rolled out expanded *Claude Cowork* capabilities, adding **enterprise workflow plugins** intended to push agentic AI beyond software development into functions such as marketing, HR, legal, and finance, positioning Claude as a broader automation layer inside organizations. Coverage characterized the move as part of a wider shift toward AI-driven workflows in the enterprise, with implications for CIO governance, adoption patterns, and how teams operationalize AI outside engineering. Separately but related to the same product-direction narrative, commentary highlighted Anthropic formalizing **security-oriented features inside Claude**—including a prominent “**suggest fix**” capability aimed at moving from vulnerability detection to automated or semi-automated remediation—prompting market speculation about pressure on certain security-tool segments (particularly code-vulnerability discovery and remediation tooling). Other items in the set were not incident- or vulnerability-driven: one was generic SAST remediation guidance, and several were general-interest or business-trend pieces (e.g., an AI model blogging, AI-native software market dynamics, and an AI-agent governance/AX article) without specific, actionable cybersecurity event details.
Jun 29, 2026