LIVE FEED
FIRST LOOK Microsoft Copilot Gains Local File Access via Hybrid Intelligence // FIRST LOOK AWS Adds Native Access Controls for RAG via Amazon Quick and Bedrock // HIGH DPRK npm Supply Chain Worm Uses Web3 C2 to Steal Cloud Keys // FIRST LOOK Rein Security Launches $25M Runtime Guard for AI Agents // HIGH APT Uses AI-Generated Lures in Google AitM Phishing on Taiwan // CRITICAL Tensorlake npm Package Hijacked by Shai-Hulud Worm // FIRST LOOK Meta Launches Open Standard to Authenticate AI Agents on the Web // FIRST LOOK Anthropic Launches 3-Tier Cyber Verification Program for AI Access // FIRST LOOK CrowdStrike Maps LLM Safety Classifier Evasion for Defenders // HIGH OpenAI Adds Training Monitors After Medicare Data Breach //
BRAGJACK

Bragjack

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
BragJack Hijacks AI Browser Agents via Malicious Extensions

BragJack Hijacks AI Browser Agents via Malicious Extensions

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 BleepingComputer

Security researcher Gal Weizman has disclosed BragJack, a browser extension-based attack technique capable of hijacking AI assistants embedded in Chromium browsers — including Chrome's Gemini Live, Perplexity Comet, Microsoft Edge, Opera Neon, and Anthropic's Claude. By exploiting Chromium's declarativeNetRequest API to weaken security headers and redirect JavaScript resources, a malicious extension can execute code inside privileged AI contexts without any user interaction. The attack has real-world consequence: compromised AI agents could read local files, exfiltrate data, or act on behalf of victims using existing browser-level privileges.

BragJack Attack Hijacks Browser AI Agents to Steal Data

BragJack Attack Hijacks Browser AI Agents to Steal Data

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

The BragJack attack exploits browser-native agentic AI assistants, manipulating them to access sensitive user data, perform unauthorised actions, and exfiltrate information without user consent. This represents a novel threat vector as AI agents become deeply integrated into mainstream browsers, expanding the attack surface significantly. The technique demonstrates how agentic AI's broad tool access and trust model can be weaponised against the very users it is designed to serve.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.