Back to all news
Security

BragJack attacks hijack AI browser agents through malicious extensions

BleepingComputer·September 19, 2026·1 min read
BragJack attacks hijack AI browser agents through malicious extensions

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using a single malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs, highlighting vulnerabilities in AI browser agents.

Read at BleepingComputer
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store