[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Tips & Guides · markdown

operational guidance (Forever Security research, Nov 4)

Tip: turn off Claude Dispatch where you don't use it, and block extensions from running on claude.ai on machines with Claude Desktop

  • In Claude Desktop, Dispatch lives under Cowork in the left panel: switch it off on machines that don't need it, and remove paired devices you don't recognize.
  • With Chrome or Edge enterprise policy, use ExtensionSettings runtime_blocked_hosts to keep extensions off *://claude.ai, or allowlist only reviewed extensions.
  • Don't sign a personal Claude account with Dispatch into a work laptop.
  • Alert on Claude Desktop spawning npm install -g, pip install or shells you didn't start.

Sources: Forever Security: ThisBash Escape (Nov 4) · Chrome Enterprise policy: ExtensionSettings