BragJack attacks hijack AI browser agents through malicious extensions
Sat Sep 19 2026
AI & ML
Attack
Browser
Exploit
Vulnerability
www.bleepingcomputer.com
BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]