LIVE · cybersecurity feed
Live wire

prompt forcing news

1 stories
CVE-2024-4405high

Malicious Extensions Hijack AI Browser Agents via Prompt Forcing

A new attack technique, dubbed "BragJack" by its discoverer, security researcher Gal Weizman of Forever Security, can hijack AI assistants embedded in popular browsers using a single malicious browser extension. The proof-of-concept demonstrated the technique against five Chromium-based browsers or browser assistants: Google Chrome's Gemini Live, Perplexity Comet, Microsoft Edge, Opera Neon,…