Story thread · 2 reports / 2 sources

BragJack attacks hijack AI browser agents through malicious extensions

bleepingcomputer.com · 4hShare

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]

First report: BragJack Attack Can Turn a Browser's Agentic AI Against It — darkreading.com, 3d