BragJack attacks hijack AI browser agents through malicious extensions
Sep 19, 2026, 02:56 PM · by BleepingComputer
BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs.
Source: BleepingComputer