News

BragJack attacks hijack AI browser agents through malicious extensions

BleepingComputer · September 19, 2026 · International · AI Governance

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]

Who should care: General readers · AI governance · Policy

#ai

Read the original at BleepingComputer → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

September 18, 2026· 4 min read Read →

The Airline Went Bankrupt. Your Email Did Not.

Google bid $10 million for a dead airline's inboxes. The fight over that sale is about what an employee's email becomes once the employer no longer exists.

September 12, 2026· 6 min read Read →

BragJack attacks hijack AI browser agents through malicious extensions

Analysis

The Attacker Did Not Need to Sleep

The Airline Went Bankrupt. Your Email Did Not.

Related stories

AI governance moves from observability to provable control

Tech industry scratches its head over Trump 'AI Force' proposal

Professor advocates for diversity in AI regulation

Can Democrats Unite on AI Regulation?

‘States should have a say’: Candidates for governor race to take on AI regulation

The AI regulation smackdown isn’t over