Voices
Claude gets its own browser inside Cowork, and Anthropic says the prompt-injection defenses 'can't eliminate' the risk
Announced August 26, Cowork on macOS, Windows and Linux now opens a Chromium browser in a side panel to navigate, read, click and type, replacing the Chrome extension dependency. Users selectively import logins from Chrome, Edge or Firefox, with banking, email and SSO sites excluded by default; it is live for Enterprise with admin controls and rolling out to Pro, Max and Team. Anthropic's own copy is unusually blunt about the limits — the injection defenses 'meaningfully reduce the risk but can't eliminate it, so we recommend starting on sites you trust' — which reads as a direct acknowledgment of the agent-browser threat model Rehberger just demonstrated.
↳ Follow the thread