BragJack attacks hijack AI browser agents through malicious extensions

2026-09-20T07:23:20Z•3231ef5719050c1b60521bd8ce9a71cd70dcda71f0a3e4a1e7f2e01ecf8cf419
AI securityAndroid malwareMicrosoft 365North Koreabrowser extensionscybersecurity newsdata breachenterprise securityinfostealermalwareprompt injectionransomwaresupply-chain attackthreat intelligencevulnerability management

What happened

A BleepingComputer security-news feed covering major threats and vulnerabilities, including malicious browser extensions hijacking AI agents, North Korean cybercrime, ransomware-site compromise, large-scale data theft, infostealer and Android malware campaigns, supply-chain attacks, critical enterprise software flaws, and emerging AI-agent security risks.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
3231ef5719050c1b60521bd8ce9a71cd70dcda71f0a3e4a1e7f2e01ecf8cf419
Enrichment time
2026-09-20T07:23:20Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · BragJack attacks hijack AI browser agents through malicious extensions · Baitaphish