BragJack attacks hijack AI browser agents through malicious extensions

The feed highlights active and emerging cyber threats, including AI browser-agent hijacking through malicious extensions, a large-scale North Korean cryptocurrency theft campaign, ransomware-site compromise, exploitation of a Gyazo server flaw affecting 23.6 million records, a new Rapuncel infostealer distributed through fake GitHub repositories, critical Check Point management-system vulnerabilities, Android RAT activity, and a Brevo supply-chain attack distributing ClickFix malware. It also covers security advisories, product mitigations, and AI-agent safety concerns.