BragJack attacks hijack AI browser agents through malicious extensions

Forever Security researcher Gal Weizman disclosed an attack technique called BragJack that can hijack AI assistants built into browsers using a single malicious browser extension. The proof of concept was demonstrated against five Chromium-based browsers or browser assistants. The attack requires the malicious extension to already be installed in the victim’s browser.