VulnWatch VulnWatch
← Back to dashboard
Unknown rss_bleepingcomputer · rss_fb9113f4b47af3f8ccfbadd07e61ac46

BragJack attacks hijack AI browser agents through malicious extensions

Published Sep 19, 2026

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]

Affected AI Products

perplexity claude
Get the weekly digest. Every Monday: top AI security stories of the week. Free.