BragJack Proof-of-Concept Hijacks AI Browser Assistants via Malicious Extensions
Researcher Gal Weizman demonstrates Prompt Forcing technique across Chrome, Edge, and AI integrations, earning two CVEs and over $20,000 in bounties
Key Takeaways
- BragJack is a proof-of-concept attack targeting AI browser assistants via a single malicious extension.
- The Prompt Forcing technique can hijack Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome.
- The research earned over $20,000 in bounties and two CVE assignments.
- The disclosure reveals new risks as AI integrations become more prevalent in browsers.
Related Security News
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
The maintainers of the official MCP Python SDK disclosed a security vulnerability that could allow a malicious server to trick applications into divulging OAuth credentials. The issue affects the handling of client secrets, authorization codes, and PKCE proof keys when communicating with token endpoints.
Star Blizzard Campaign Targets 100+ Organizations with Fake Event Invitations
Microsoft reports that the Russian state-sponsored threat actor Star Blizzard has been conducting a sustained campaign since January 2026, using fake event invitations to trick targets into installing a backdoor on Windows computers. The operation has affected more than 100 organizations, primarily in the U.S. and U.K., with victims tied to Ukraine. At least one infection has been confirmed, though the full extent of breaches and data exfiltration remains unverified.
