Share story
Security AI

BragJack research shows malicious extensions can seize browser AI agents

BragJack research shows malicious extensions can seize browser AI agents Image: Primary
Security researcher Gal Weizman disclosed BragJack, a proof-of-concept technique that uses one malicious browser extension to hijack AI assistants in five Chromium-based browsers or browser assistants. The research produced two CVEs and more than $20,000 in vendor bug bounties. Weizman showed that an installed extension could manipulate trusted web traffic, then direct privileged AI components to read sensitive data or act for a victim. Google and Microsoft resolved the flaws assigned to them.
Sources
BleepingComputer
In this story
Google Microsoft
Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital AI
Capital AI

October venture funding reaches $59 billion, with 66% going to AI

Global venture funding totaled $59 billion in October, up 45% from a year earlier, according to Crunchbase data. AI-driven companies captured 66% of the total, while seven companies raising billion-dollar rounds accounted for just over 40%.

Crunchbase News
Infrastructure
Infrastructure

Energy Transfer commits to $1.6 billion Louisiana-Mississippi gas pipeline

Energy Transfer LP has formally committed to building a $1.6 billion natural-gas pipeline, Bloomberg reports. The pipeline will move fuel from eastern Louisiana across Mississippi as data centers and export terminals increase demand for natural gas.

Bloomberg Technology
Capital Products
Capital Products

Journify raises $12 million to expand advertising data platform

Journify announced a $12 million Series A led by Al Mada Ventures and co-led by returning investor Silicon Badia. The company says the funding will support expansion into the US and Europe and develop the AI behind its advertising data platform.

The Next Web