Onmsft2026-09-21 05:06:53

BragJack Attack Can Hijack AI Assistants in Chrome, Edge, and Other Browsers

BragJack, a newly disclosed proof-of-concept attack, can let malicious browser extensions hijack AI assistants built into Chromium-based browsers.

Summary

Security researcher Gal Weizman of Forever Security demonstrated the attack against Google Chrome’s Gemini Live, Perplexity Comet, Microsoft Edge, Opera Neon, and Claude in Chrome. The malicious extension must already be installed in the victim’s browser.

ai agentsnewschromeaibrowser

This summary is a partial excerpt — the source's own feed cuts off here. Read the full story at Onmsft for the rest.

KazaSec's take

Incidents like this rarely start with the headline event itself — they usually trace back to an exposed remote-access endpoint, an unpatched perimeter system, or a credential phished weeks earlier. The organizations that recover fastest are the ones that tested their defenses and their incident response plan before they needed them.

Coverage details

Source: Onmsft
Published: 2026-09-21 05:06:53
Author: milan stanojevic
Category: toptechnology

We've archived 290 other articles touching the same topic (ai agents, news, chrome) — see the full security news archive.

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services