BragJack and the Missing Sender Validation in Agent Bridges
pr0h0•
BragJack exposes how missing sender validation in the message bridges between browser extensions and AI agent APIs lets a single malicious extension hijack assistants across five major browsers without any user interaction.
browser-extensionsai-agentsweb-security
