malicious-browser-extension

Single Browser Extension Could Hijack AI Assistants Across Chrome, Edge, Opera Neon, Comet, and Claude

Security researchers at Forever Security have demonstrated that a single ordinary browser extension could take control of AI assistants integrated into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon, and the Claude in Chrome extension. Once installed, the extension could access each product's built-in AI with a single click, potentially enabling prompt injection, data exfiltration, or unauthorized actions. The findings highlight the risks of granting broad permissions to browser extensions and the need for stronger isolation of AI features.