← registry

BragJack attacks hijack AI browser agents through malicious extensions

A proof-of-concept attack called BragJack demonstrated the ability to hijack AI browser agents across multiple platforms using a single malicious extension, exploiting prompt injection vulnerabilities.

Categoryprompt_injection
Severityhigh
AI systemchatbot
Sectorstechnology
Harm typessecurityprivacy
Lifecycle stagedeployment
Actorexternal_attacker
Published2026-09-19 14:56:31

Summary is Secursion's own; full text lives at the source. Attribution preserved.