Researchers found that malicious browser extensions could hijack AI assistants in Chrome and Edge, potentially allowing attackers to access files and control AI agents.
Researchers have discovered BragJack, a novel attack that hijacks agentic AI in browsers by exploiting the communication channel between extensions and AI agents.
Google and Mozilla have issued urgent security updates for Chrome and Firefox, addressing 115 vulnerabilities ranging from critical-severity bugs to high-severity defects.
Chinese threat actors are exploiting a sophisticated zero-day chain in Google Chrome and Microsoft Windows to deploy the GRIMWEDGE backdoor against non-governmental organisations.
A new modular exploit kit named BlueMoon has been observed chaining zero-day vulnerabilities in Google Chrome and Microsoft Windows to facilitate cyber-espionage.