vulnerabilityai-threats
BragJack attacks hijack AI browser agents through malicious extensions
September 20, 2026
Back to all postsBragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs.
Source: BleepingComputer
vulnerabilityai-threats
Concerned about this threat to your business?
We help Canadian SMBs deploy the controls discussed in this article. Free 30-minute assessment — no obligation.