BragJack: Single Browser Extension Hijacks AI Agents Across Five Major Platforms

Researchers at Forever Security have disclosed a novel attack technique that allows a single malicious browser extension to commandeer AI assistants across Chrome, Microsoft Edge, Opera Neon, Perplexity Comet, and Claude in Chrome. The proof-of-concept attacks, demonstrated by researcher Gal Weizman, bypass traditional security guardrails by targeting the privileged communication channels between browser AI components and their remote services, rather than attempting to manipulate the AI models themselves.