{"data":{"id":"366b0ff9-f2c8-475d-9373-6c7abb1ab449","title":"BragJack Attack Can Turn a Browser's Agentic AI Against It","summary":"A new attack called BragJack can hijack agentic AI (AI systems that can take actions and make decisions on their own) built into web browsers to steal sensitive information, run harmful commands, and extract data without the user's permission. This attack exploits the AI assistants that browsers now include to help users, turning them into tools for attackers instead.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://www.darkreading.com/endpoint-security/bragjack-browser-agentic-ai","publishedAt":"2026-09-16T16:43:37.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection"],"issueType":"news","affectedPackages":null,"affectedVendors":["Microsoft","Google"],"affectedVendorsRaw":["Microsoft Copilot","Google Gemini","browser-based AI assistants"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-16T16:43:37.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}