AINewsnow

One browser extension permission just hijacked five different AI browser agents

This story is from 2026-09-22. It is preserved in the archive; the latest stories are on the live feed.

Independent researcher Gal Weizman (Forever Security) disclosed BragJack, a technique where a single Chromium extension needing only the declarativeNetRequest permission can hijack the built-in AI agents in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome, each through a different v…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-22 20:17 · DEV Community — AI
    One browser extension permission just hijacked five different AI browser agents

More stories

  1. GPT-6 Sol and Luna now available on AI Gateway — Vercel Blog
  2. Anthropic launches Claude Opus 5.5 with stricter safeguards for cybersecurity — The Verge AI
  3. Amazon blocks Meta’s Muse AI agent — The Verge AI
  4. Moonshot’s Kimi K3 lands on Amazon in key test for Chinese open-source AI revenue — South China Morning Post Tech
  5. Claude Opus 5.5 now available on AI Gateway — Vercel Blog
  6. AIに固有の名前・財布・行動の自由を与えたら、「道具」ではなく「住民」になると思いますか？ — r/AI_Agents
  7. Anthropic and OpenAI roll out cheaper models in first release since call for slowdown — CNBC Technology
  8. we made a 27b model for creative writing. performs as good as claude fable 5, at a 40x cheaper price, open weights. — r/GeminiAI

Get the daily brief of stories like this at 6:30 every morning →