<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>cybercrime.club</title><link>https://cybercrime.club/tags/browser-extension/</link><description>Infrastructure security news for people who build infrastructure.</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Sun, 20 Sep 2026 11:07:13 -0400</lastBuildDate><atom:link href="https://cybercrime.club/tags/browser-extension/" rel="self" type="application/rss+xml"/><item><title>BragJack: One Malicious Extension Hijacks AI Agents Across Five Major Browsers</title><link>https://cybercrime.club/posts/bragjack-ai-browser-agent-extension-hijack/</link><pubDate>Sun, 20 Sep 2026 11:07:13 -0400</pubDate><guid>https://cybercrime.club/posts/bragjack-ai-browser-agent-extension-hijack/</guid><description>Researcher Gal Weizman's BragJack proof-of-concept shows how a single malicious extension can hijack the built-in AI agents in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome, earning $20K+ in bounties and two CVEs (CVE-2026-0628, CVE-2026-55945).</description><category>vulnerabilities</category></item></channel></rss>