AI assistants are moving deeper into the browsers we use every day.They can summarize a webpage, explain what you are looking at and, in some cases, take action on websites for you.
That convenience also gives these tools access that a normal webpage would never have.Now, security researcher Gal Weizman of Forever Security has shown how a malicious browser extension could potentially turn those powerful AI capabilities against you.
His research, called BragJack, targeted Gemini Live in Chrome, Perplexity Comet, Microsoft Edge Actions, Opera Neon and Anthropic's Claude in Chrome.The findings resulted in more than $20,000 in bug bounties and two CVEs.There is one important detail before you panic.
The attack still required the malicious extension to be installed first.After that, Weizman demonstrated attacks that needed zero additional clicks from the victim.
So how could one extension get that far inside the browser? It comes down to how these AI assistants are built.Missed CyberGuy LIVE? Watch the replay and discover 5 ways AI can help you get better healthcare.Our free CyberGuy LIVE class, Get Better Healthcare With AI, has ended, but you can still watch the full replay.Kurt "CyberGuy" Knutsson walks you through five practical ways AI can help you organize your health history, remember important appointment details, understand complicated medical information, research prescriptions and prepare smarter questions for your doctor.
No technical experience is needed.Watch the free replay + downloadable checklist now at CyberGuyLive.comAI MALWARE CAN REWRITE ITSELF TO EVADE DETECTIONGemini in Chrome can work across webpages, but researchers showed how a malicious extension could potentially abuse those deeper browser privileges.(Kurt "CyberGuy" Knutsson)Weizman describes these AI systems as having a "brain" and a "body." The AI model works out what should happen.
A privileged component inside the browser then carries out the request.Depending on the product, that ...