SecOne4allLoading…
S1SecOne4all
Join free
CYBERSECURITY✓ EDITORIALLY REVIEWED

BragJack attacks hijack AI browser agents through malicious extensions

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]

BBleepingComputerOriginal reporting source
1 min read

Source summary

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]

Read the original report

Source transparency

This editorial summary links back to the original reporting. Review the source for its complete context and updates.

Open original report ↗
Continue reading
More verified coverage
CYBERSECURITY · Sep 29, 2024 · 06:09 AM · UTC · UTC+00:00Apple iOS 17.2.1 - Screen Time Passcode Retrieval (Mitigation Bypass)

<p>A mitigation bypass / privilege escalation flaw has been discovered in Apple's iOS Screen Time functionality</p>

Read article →CYBERSECURITY · Sep 28, 2024 · 11:07 AM · UTC · UTC+00:00CVE-2024-8056: MM-Breaking News WordPress Plugin Reflected XSS Vulnerability

<p>The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers</p>

Read article →CYBERSECURITY · Sep 28, 2024 · 09:28 AM · UTC · UTC+00:00CVE-2024-47048: Rocket.Chat Stored XSS Vulnerability

<p>A stored cross-site scripting (XSS) vulnerability was discovered in Rocket.Chat versions 6.12.0 and earlie</p>

Read article →