highMalware
BragJack Proof-of-Concept Hijacks AI Browser Assistants via Malicious Extensions
A proof-of-concept attack dubbed BragJack, disclosed by researcher Gal Weizman of Forever Security, exploits AI assistant integrations in Chrome, Microsoft Edge, Opera Neon, Perplexity Comet, and Claude in Chrome. Using a single malicious extension, the Prompt Forcing technique can hijack these assistants to inject instructions or exfiltrate data. The research earned over $20,000 in bounties and two CVE assignments (CVE-2026-XXXX, CVE-2026-YYYY). Vendors are likely reviewing or deploying mitigations.
BleepingComputer1 min read