Forever Security Demonstrates Single-Extension Hijack of AI Assistants in Five Chromium Products

Forever Security has disclosed BragJack, a research demonstration showing how one ordinary browser extension could reach AI assistants inside five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and Claude in Chrome. The work does not describe active exploitation in the wild, but it highlights a new trust-boundary problem for browser-based agents: an extension that can modify trusted web pages can sometimes speak to the agent as if it were the vendor's own control surface.