conv.

All stories
SecurityQuiet 2d · day 8

BragJack attack hijacks browser AI agents through malicious extensions

Security researchers reveal a new attack vector that weaponizes built-in AI assistants to steal data and execute malicious actions.

newest coverage 2d agosummary written 4d ago8 pieces3 likes & upvotes NewswiresMastodonHacker News

What to know

  • BragJack is a new attack that weaponizes built-in AI assistants in web browsers by exploiting malicious extensions.
  • The attack can access sensitive information, execute actions, and steal data by hijacking the browser's agentic AI functionality.
  • The vulnerability affects browsers with integrated AI assistant features and users who install malicious or compromised extensions.

“A new type of attack hijacks the AI assistant built directly into various browsers to access sensitive information, execute malicious actions, and exfiltrate data.”

Dark Reading · Dark Reading ↗ · Sep 15

Elizabeth Montalbano Security reporter, Dark ReadingAx Sharma Security reporter, Bleeping Computer

How it unfolded 3 developments, newest first · click a bar or a number to jump articlesposts

Peak 2 pieces in two hours at Sep 19, 9 AM; 8 pieces over 8 days (1 article · 7 posts) Sep 16, 11 AM — 1 piece · 1 article — Newswires 1Sep 16, 1 PM — quietSep 16, 3 PM — quietSep 16, 5 PM — quietSep 16, 7 PM — quietSep 16, 9 PM — quietSep 16, 11 PM — quietSep 17, 1 AM — quietSep 17, 3 AM — quietSep 17, 5 AM — quietSep 17, 7 AM — quietSep 17, 9 AM — quietSep 17, 11 AM — quietSep 17, 1 PM — quietSep 17, 3 PM — quietSep 17, 5 PM — quietSep 17, 7 PM — 1 piece · 1 post — Mastodon 1Sep 17, 9 PM — quietSep 17, 11 PM — quietSep 18, 1 AM — quietSep 18, 3 AM — quietSep 18, 5 AM — quietSep 18, 7 AM — quietSep 18, 9 AM — quietSep 18, 11 AM — quietSep 18, 1 PM — quietSep 18, 3 PM — quietSep 18, 5 PM — quietSep 18, 7 PM — quietSep 18, 9 PM — quietSep 18, 11 PM — quietSep 19, 1 AM — quietSep 19, 3 AM — quietSep 19, 5 AM — quietSep 19, 7 AM — quietSep 19, 9 AM — 2 pieces · 2 posts — Mastodon 2Sep 19, 11 AM — quietSep 19, 1 PM — quietSep 19, 3 PM — quietSep 19, 5 PM — quietSep 19, 7 PM — quietSep 19, 9 PM — quietSep 19, 11 PM — quietSep 20, 1 AM — quietSep 20, 3 AM — quietSep 20, 5 AM — quietSep 20, 7 AM — 1 piece · 1 post — Hacker News 1Sep 20, 9 AM — quietSep 20, 11 AM — quietSep 20, 1 PM — quietSep 20, 3 PM — quietSep 20, 5 PM — 1 piece · 1 post — Mastodon 1Sep 20, 7 PM — quietSep 20, 9 PM — quietSep 20, 11 PM — quietSep 21, 1 AM — quietSep 21, 3 AM — quietSep 21, 5 AM — quietSep 21, 7 AM — quietSep 21, 9 AM — quietSep 21, 11 AM — quietSep 21, 1 PM — quietSep 21, 3 PM — 1 piece · 1 post — Mastodon 1Sep 21, 5 PM — 1 piece · 1 post — Mastodon 1Sep 21, 7 PM — quietSep 21, 9 PM — quietSep 21, 11 PM — quietSep 22, 1 AM — quietSep 22, 3 AM — quietSep 22, 5 AM — quietSep 22, 7 AM — quietSep 22, 9 AM — quietSep 22, 11 AM — quietSep 22, 1 PM — quietSep 22, 3 PM — quietSep 22, 5 PM — quietSep 22, 7 PM — quietSep 22, 9 PM — quietSep 22, 11 PM — quietYesterday, 1 AM — quietYesterday, 3 AM — quietYesterday, 5 AM — quietYesterday, 7 AM — quietYesterday, 9 AM — quietYesterday, 11 AM — quietYesterday, 1 PM — quietYesterday, 3 PM — quietYesterday, 5 PM — quietYesterday, 7 PM — quietYesterday, 9 PM — quietYesterday, 11 PM — quietToday, 1 AM — quietToday, 3 AM — quiet 123
Sep 17Sep 18Sep 19Sep 20Sep 21Sep 22yesterdaynow · 4:44 AM ET
  1. 3

    Bleeping Computer details BragJack hijacking via malicious extensions

    Bleeping Computer publishes expanded coverage identifying malicious browser extensions as the attack vector for hijacking AI browser agents.

    • packet_storm@infosec.exchange

      BragJack Attack Lets Browser Extensions Hijack AI Agents across Chrome, Edge and Comet https:// packetstorm.news/news/view/437 32 # news

      packet_storm@infosec.exchangeMastodon2d agoview on Mastodon ↗
  2. 2

    Security researchers share BragJack findings across platforms

    The vulnerability report spreads through infosec communities as researchers share links to the Dark Reading analysis.

  3. 1 day quiet
  4. 1

    Dark Reading reports BragJack attack that hijacks browser AI assistants

    Security coverage reveals a new attack type that hijacks the AI assistant built directly into various browsers to access sensitive information, execute malicious actions, and exfiltrate data.

    1. 1 outlet BragJack Attack Can Turn a Browser's Agentic AI Against It

      first by Dark Reading, 7d ago