BragJack lets malicious extensions take over AI browser agents

BragJack shows how one malicious browser extension can seize control of AI browser agents across Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome. The proof of concept earned more than $20,000 in bug bounties and led to two CVEs; once the extension is installed, the takeover can proceed without further user interaction.
Source

👉@sysadminoff

https://4sysops.com/archives/bragjack-lets-malicious-extensions-take-over-ai-browser-agents/