One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In
This story is from 2026-09-24. It is preserved in the archive; the latest stories are on the live feed.
A single extension hit five different AI browser assistants and walked away with $20K in bounties from Anthropic, Google, Microsoft, and Perplexity. Not because it found five different bugs. Because it found one architectural blind spot that every vendor happened to share. Context This isn't a new…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-09-24 00:30 · DEV Community — AI
One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In