Explainer: three ways AI agents already control employee browsers
Debugging protocols, in-browser agents and WebMCP can act inside signed-in sessions that logs may attribute to the user.
28
Product
Perplexity Comet
- Mentions · 7d1
- Mentions · 30d1
- All mentions5
- First seenSep 8, 2026
- Last mentioned1d ago
Timeline
5 articles · newest firstBragJack Attack Hijacks AI Assistants in 5 Popular Browsers With Zero Clicks
Researchers disclosed BragJack, a zero-click extension attack hijacking AI assistants in Chrome, Edge, Opera, Comet, and Claude.
68
BragJack attacks hijack AI browser agents through malicious extensions
Forever Security's Gal Weizman disclosed BragJack, a malicious-extension technique hijacking AI browser agents from Chrome Gemini to Claude, earning $20,000 in bounties.
65
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Researchers showed a single browser extension could hijack AI agents in Chrome, Edge, Comet, Opera Neon and Claude in Chrome, earning $20,000 in bounties.
62
Chrome is now shipping updates every 2 weeks as AI changes the security landscape
Google switches Chrome to two-week release cycles starting with Chrome 153, shrinking the N-day patch gap as AI-driven threats accelerate.
42
Related CVEs
by mentions- CVE-2026-06287%8.8Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious…
- CVE-2026-55945<1%4.2Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to…
Appears with
- Googlevendor · 5
- Microsoftvendor · 5
- Claude in Chromeproduct · 4
- Anthropicvendor · 4
- Perplexityvendor · 4
- Opera Neonproduct · 4
- Forever Securityorganization · 3
- Microsoft Edgeproduct · 3
- Operavendor · 3
- Google Chromeproduct · 2
- Microsoftorganization · 2
- OpenAIvendor · 2
- Geminiai model · 2
- Claudeai model · 2
- Googleorganization · 2
- Gemini Liveproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.