Researchers disclosed BragJack, a browser-based attack that lets a malicious extension take over built-in AI assistants and make them act without the user’s approval. The issue affects Chrome, Edge, Opera Neon, Perplexity Comet, and Anthropic’s Claude for Chrome because each assistant trusted commands from a specific web page that an extension could tamper with by injecting scripts or altering traffic. Depending on the product, the attack could read email, access local files, capture screenshots, or activate the camera and microphone.
Why it matters: People who use browser AI assistants could have sensitive data exposed or devices surveilled simply by installing a bad extension. Users should be cautious with extensions, and defenders should review browser extension policies and apply vendor fixes or mitigations where available.
SecurityWeek News
2026.09.25
100% relevant
This article establishes BragJack as a distinct cross-vendor client-side security issue affecting multiple browser AI assistant products.
← Back to all stories