BragJack attacks hijack AI browser agents through malicious extensions
Forever Security's Gal Weizman disclosed BragJack, a malicious-extension technique hijacking AI browser agents from Chrome Gemini to Claude, earning $20,000 in bounties.
65
Vendor
Chromium
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 11, 2026
- Last mentionedSep 19, 2026
Timeline
2 articles · newest firstAttackers are weaponizing the gap between Chromium fixes and Chrome patches
Espionage actors use the BlueMoon exploit kit to chain Chrome V8 and Windows kernel zero-days via spear phishing, gaining full admin on unpatched endpoints.
82
Related CVEs
by mentions- CVE-2026-874914%8.8Actively Exploited Out-of-Bounds Write in Google Chrome V8
- CVE-2026-850462%8.8Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-06287%8.8Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious…
- CVE-2026-55945<1%4.2Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to…
Appears with
- Microsoft Windowsvendor · 1
- Microsoft Threat Intelligence Centervendor · 1
- Google Threat Intelligence Groupvendor · 1
- Claude in Chromeproduct · 1
- China-aligned espionage clustersthreat actor · 1
- Perplexityvendor · 1
- US NGOsorganization · 1
- Opera Neonproduct · 1
- Operavendor · 1
- Gemini Liveproduct · 1
- Anthropicvendor · 1
- BlueMoonthreat actor · 1
- Chromiumproduct · 1
- Chromeproduct · 1
- Microsoftvendor · 1
- Volexityvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.