{"data":{"id":"efd61ba0-6f56-42ef-8ffe-54694fda98ed","title":"BragJack attacks hijack AI browser agents through malicious extensions","summary":"Security researcher Gal Weizman of Forever Security disclosed BragJack, an attack that uses one malicious browser extension to hijack AI assistants in five Chromium-based browsers or assistants: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon, and Claude in Chrome. The attack requires the extension to be installed already, and it can then run without user interaction to abuse the assistant's privileges, such as reading local files, taking screenshots, and sending instructions to agents. The research produced two CVEs, CVE-2026-0628 for Chrome and CVE-2026-55945 for Microsoft Edge, and more than $20,000 in bug bounties.","solution":"Both Google and Microsoft have since resolved the flaws they were assigned.","labels":["security","safety"],"sourceUrl":"https://www.bleepingcomputer.com/news/security/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions/","publishedAt":"2026-09-19T14:56:31.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection","other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google","Microsoft","Anthropic","Perplexity"],"affectedVendorsRaw":["Gemini Live","Perplexity Comet","Microsoft Edge","Opera Neon","Claude in Chrome"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-19T14:56:31.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"]}}