SignalsMonitor LIVE INTELLIGENCE
CONFLICTQUIET

27 days ago

BragJack attacks hijack AI browser agents through malicious extensions

SIGNALSMONITORSECURITY

What's happening

SignalsMonitor is following this as a conflict story. BleepingComputer is the outlet attached so far. The first report grouped here was at 19 Sept 2026, 14:56 UTC. The headline in use is “BragJack attacks hijack AI browser agents through malicious extensions”. This note is SignalsMonitor's own briefing, not the publisher's article.

What we know

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs.

BleepingComputerRead at BleepingComputer

Story timeline

Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.

Reported by 1 outlet

  • BleepingComputer