Explainer: three ways AI agents already control employee browsers
Debugging protocols, in-browser agents and WebMCP can act inside signed-in sessions that logs may attribute to the user.
28
Product
Claude in Chrome
- Mentions · 7d1
- Mentions · 30d1
- All mentions5
- First seenSep 16, 2026
- Last mentioned3d ago
Timeline
5 articles · newest firstBragJack Attack Hijacks AI Assistants in 5 Popular Browsers With Zero Clicks
Researchers disclosed BragJack, a zero-click extension attack hijacking AI assistants in Chrome, Edge, Opera, Comet, and Claude.
68
BragJack attacks hijack AI browser agents through malicious extensions
Forever Security's Gal Weizman disclosed BragJack, a malicious-extension technique hijacking AI browser agents from Chrome Gemini to Claude, earning $20,000 in bounties.
65
BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers
Researchers demonstrated 'BragJack' browser-extension attacks that hijack AI agents in Chrome, Edge, Comet, Opera Neon, and Claude, leading to two CVEs and vendor patches.
68
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Researchers showed a single browser extension could hijack AI agents in Chrome, Edge, Comet, Opera Neon and Claude in Chrome, earning $20,000 in bounties.
62
Related CVEs
by mentions- CVE-2026-06287%8.8Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious…
- CVE-2026-55945<1%4.2Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to…
Appears with
- Googlevendor · 5
- Anthropicvendor · 5
- Microsoftvendor · 5
- Perplexityvendor · 5
- Opera Neonproduct · 4
- Perplexity Cometproduct · 4
- Microsoft Edgeproduct · 4
- Forever Securityorganization · 4
- Operavendor · 4
- Claudeai model · 3
- Geminiai model · 3
- Google Chromeproduct · 2
- Chromeproduct · 2
- Gemini Liveproduct · 2
- Geminiproduct · 1
- NISTorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.