Latest research
View all research-
securityBragJack: How We Hijacked 5 Of The World's Most Popular Browsers Using Their Built-In AI Assistants
We hijacked the agents inside Gemini Live in Chrome, Microsoft Edge, Opera Neon, Perplexity Comet, and Claude in Chrome - using one single extension
Read article -
securityBragJack [Technical Overview]: How We Hijacked Top 5 Browsers' Internal Agents With Just One Single Extension
BragJack attack (discovered by Forever Security) allowed ordinary extensions to hijack the internal browser agent of Comet, Chrome, Edge, Opera, and Claude in Chrome
Read article -
securityMaXSS & Spyder: How two Chrome extensions allow websites to compromise over 10 million browsers
How SiderAI and MaxAI agentic side panel extensions are vulnerable to severe cross-site vulnerabilities, allowing attackers to compromise browsers easily and entirely
Read article