21st September – Threat Intelligence Report
Check Point weekly roundup covers Japan Digital Agency and Gyazo breaches, actively exploited Cisco ISE flaw, and multiple new APT campaigns.
4
Stories per day · 30 days
1 RSS
5 stories, newest first · one card per story
Stories tagged #bragjack
BragJack Attack Hijacks AI Assistants in 5 Popular Browsers With Zero Clicks
Researchers disclosed BragJack, a zero-click extension attack hijacking AI assistants in Chrome, Edge, Opera, Comet, and Claude.
5
BragJack attacks hijack AI browser agents through malicious extensions
Forever Security's Gal Weizman disclosed BragJack, a malicious-extension technique hijacking AI browser agents from Chrome Gemini to Claude, earning $20,000 in bounties.
BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers
Researchers demonstrated 'BragJack' browser-extension attacks that hijack AI agents in Chrome, Edge, Comet, Opera Neon, and Claude, leading to two CVEs and vendor patches.
8
_Pattara_Alamy.jpg%3Fwidth%3D720%26quality%3D80%26disable%3Dupscale&w=828&q=75)
BragJack Attack Can Turn a Browser's Agentic AI Against It
New BragJack attack hijacks browsers' built-in agentic AI to access data, run malicious actions, and exfiltrate information.