CCT 348: ClaudeBleed - The Hidden Risk In AI Browser Extensions and CISSP Domain 3

About this episode

The episode discusses the ClaudeBleed vulnerability in AI browser extensions and its implications for cybersecurity.

Send us Fan Mail Your browser just became a security boundary you can’t afford to ignore. We start with ClaudeBleed, a vulnerability in the Claude AI Chrome extension that shows how an AI browser agent can be hijacked by another malicious extension, even one with zero special permissions. When an agent can act “as you” inside a trusted environment, the risk jumps from theory to real outcomes like silent email sending, data loss through Google Drive, or code theft from private repos. We walk ...

People in this episode

Host: Shon Gerber

Topics covered

• AI security
• browser extensions
• CISSP Domain 3
• vulnerabilities
• data loss
• cybersecurity risks

Keywords

• ClaudeBleed
• AI browser extensions
• CISSP
• security risks
• data loss
• vulnerabilities
• cybersecurity

Mentioned in this episode

Products: Claude AI Chrome extension

More episodes of CISSP Cyber Training Podcast - CISSP Training Program

• CCT 356: Supply Chain Attacks Are Exploding in 2026 — Here's What the NCSC Wants You to Do · June 8, 2026 · 42 min
• CCT 355: Zapier Breach Lessons For Cloud Security and Setting Up TPRM Program in 15 Minutes · June 4, 2026 · 24 min
• CCT 354: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY · June 1, 2026 · 37 min
• CCT 353: AI Agent Governance Essentials - CISSP Practice Questions · May 28, 2026 · 28 min
• CCT 352: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY · May 25, 2026 · 40 min
• CCT351: BitLocker Bypass Reality Check (YellowKey) and CISSP Practice Questions · May 21, 2026 · 24 min