A proof-of-concept attack called BragJack demonstrated the ability to hijack AI browser agents across multiple platforms using a single malicious extension, exploiting prompt injection vulnerabilities.
Summary is Secursion's own; full text lives at the source. Attribution preserved.