As cited
Copy frozen at (site build).
ai security
BragJack attacks hijack AI browser agents through malicious extensions
BragJack, a proof-of-concept attack from security researcher Gal Weizman at Forever Security, demonstrates how a single malicious browser extension can hijack artificial intelligence (AI) assistants across multiple platforms including Chrome, Edge, Opera Neon, Perplexity Comet, and Claude. The attack uses a Prompt Forcing technique and has resulted in over $20,000 in bug bounties and two assigned CVEs.
Why it matters: Security teams and enterprise browser administrators should assess whether their users deploy untrusted extensions, as this attack vector enables attackers to compromise AI assistants and potentially extract sensitive data or manipulate AI-assisted workflows.
- Source published
- First seen by Cybersecurity Tracker