Security/demo/2026-09-16

Browser Extension Vulnerability Allows Hijacking of AI Agents Across Five Browsers

Security researchers have identified a vulnerability, dubbed the "BragJack Attack" by one outlet, where a single browser extension can hijack AI agents across five different browsers. The attack reportedly requires no user clicks, allowing for unauthorized control over AI functionalities within the browser environment.

2 articles from 2 outlets covered this story. The underlying claim is sourced from a demo.

What do all outlets agree on?

2 outlets covered “Browser Extension Vulnerability Allows Hijacking of AI Agents Across Five Browsers”. All of them report the following:

  • A single browser extension can hijack AI agents
  • The attack affects five browsers
  • No user clicks are required for the hijacking

Which outlets covered this?

All 2 articles found on this story, grouped by the stance of the piece. Every link goes to the original publisher.

What related stories are there?

Which companies does this involve?

Get the week in AI in one email

What happened, which outlets reported it, and where their coverage differed. One issue a week.

The first issue hasn’t gone out yet. Subscribe and it’s the one you’ll get.

We’ll send the digest and nothing else. One-click unsubscribe. Privacy.