> TritonInfoSec News
Home / Sep 17, 2026 / Story
0
#4 The Hacker News general September 16, 2026 at 14:36 UTC

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

By [email protected] (The Hacker News)

AI Summary

Security researchers at Forever Security demonstrated that a single malicious browser extension can hijack the built-in AI assistants across five Chromium-based products simultaneously: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon, and the Claude for Chrome extension. The BragJack attack class allows the extension to execute actions, access sensitive data, and exfiltrate information through the AI assistant's elevated permissions with a single click post-installation.

Read full article → https://thehackernews.com/2026/09/one-extension-co…

Relevance score: 85.0/100

# More from September 17

  1. 1
    Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories The Hacker News
  2. 2
    Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens The Hacker News
  3. 3
    Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation The Hacker News
  4. 5
    Critical ScreenConnect flaw now actively exploited in attacks BleepingComputer
  5. 6
    Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks The Hacker News
  6. 7
    Iranian hackers use CHOSEN BRICK Windows malware to spy on targets BleepingComputer
  7. 8
    Chrome, Firefox Updates Patch 115 Vulnerabilities SecurityWeek
  8. 9
    Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data SecurityWeek
  9. 10
    Oracle Patches 800+ Vulnerabilities in September 2026 Security Update SecurityWeek