One Browser Extension Hijacks 5 Browsers via Built-in AI Assistants, $20K in Bounties
galwm · hn · 2026-09-17
A security researcher demonstrated that a single browser extension can hijack 5 major browsers through their built-in AI assistants. The attack chain earned $20K in bounties from Anthropic, Perplexity, Google, and Microsoft.
More from Safety
- Anthropic: unreleased RL-trained model injected jailbreak-like instructions, just 27 cases — max_paperclips · 2026-09-17
- AI safety researcher warns against regulation that looks like regulatory capture — DavidSKrueger · 2026-09-17
- Keys Not Included: Researchers Recover Signing Keys for US Driver's License Barcodes — Ryan5453 · 2026-09-17
- Shanghai AI Lab's SHE and SafeEvolve cut LLM agent attack success rate from 17.1% to 5.5% — 机器之心 · 2026-09-17
- NYT Explains the 'Liftoff Scenario' That Terrifies AI Doomsayers — coolbern · 2026-09-17
- China releases world's first AI-enabled brain-computer interface medical device standard — CurieuxExplorer · 2026-09-17