BragJack attacks hijack AI browser agents through malicious extensions

A proof-of-concept attack dubbed BragJack demonstrates how malicious browser extensions can hijack AI assistants integrated into popular browsers including Chrome, Edge, and Opera. Utilizing a ‘prompt forcing’ technique, the attack manipulates AI agents into performing unauthorized actions. This research resulted in multiple CVEs and highlights the inherent security risks of browser-integrated AI features.