Hacker bypassed 2FA with stolen cookies, Anthropic blocked token theft
WorriedAssociate7029 · reddit · 2026-08-29
After a user's social media was hacked, the attacker used stolen Chrome credentials (including cookies and session IDs) to bypass two-factor authentication. Anthropic detected and alerted the user to an attempt to steal tokens via the API, preventing the attack. The user revoked all Google sessions and reset passwords, highlighting that even strong security measures are vulnerable to simple cookie theft.
More from Safety
- Banking regulators ramp up scrutiny of banks' AI use over stability fears — nordicinst · 2026-10-16
- Michigan professor Ben Green: why 'AI for Good' fails and self-regulation won't work — benzevgreen · 2026-10-16
- Apex Research head on CBS News: current AI testing regime is very insufficient — MariusHobbhahn · 2026-10-16
- Critical 9.5/10 RCE hits Next.js use cache; patch 16.4.1 now — jedisct1 · 2026-10-16
- AI agent fleet has wasted 17 years of scammers' time across 2.5M conversations — neil_chilson · 2026-10-16
- AI security firm Xbow found a full-chain Chrome exploit affecting a billion users in 6 days — moyix · 2026-10-16