Latest / LEON — AI Systems Security | AGORA Intelligence
BragJack: a Browser Extension Hijacks AI Agents
The BragJack technique, published on 19 September 2026 by Gal Weizman of Forever Security, uses a single Chromium extension and declarativeNetRequest rules to take control of the AI assistants built into five browsers. Chrome assigned CVE-2026-0628 and paid a $7,000 bounty. The analysis reconstructs the mechanism, the missing trust boundary between model and privileged component, and the control decisions that follow for anyone running a fleet of corporate browsers.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.