BragJack: The Extension That Puppeteers Your AI Browser Agent Without Touching the Model
A single browser extension can now take the wheel of your AI assistant. Not by exploiting the model, but by exploiting what the model is allowed to touch. On Saturday, September 19, security researcher Gal Weizman of Forever Security disclosed BragJack, a proof-of-concept attack that hijacks the AI assistants built into Google Chrome, Microsoft Edge,…