Browser AI agent security research: security researcher Gal Weizman of Forever Security demonstrated that one ordinary browser extension can hijack AI agents in Chrome, Edge, Perplexity Comet, Opera ...

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension.

Malicious JavaScript campaigns on e-commerce storefronts evaded VirusTotal in 7 of 8 cases, exposing a structural gap in signature-based scanning. Cloudflare's graph neural network caught all eight ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

The privacy-friendly services for viewing X posts without an account have gone dark again after X's escalated legal action.

A government organization providing cloud infrastructure to Indian companies is inadvertently distributing malware.

A new type of attack hijacks AI assistants built directly into a browser to access sensitive information, execute malicious ...

MCP is now stateless at the protocol level. The Mcp-Session-Id header and the initialize/initialized handshakes that linked clients to specific server instances have been removed. The protocol version ...

Following the rollout of Apple’s 2027 system releases, the WebKit blog has now published an in-depth look at what’s new with ...

Attackers are scanning internet-exposed Vite development servers for environment files, cloud credentials and infrastructure configuration.

"I hear Jev is amazing. But what can an AI that doesn't write text actually do?" For those with such questions, I have ...

AdBlock blocks known crypto miners by default, but c/side found 3,500+ sites running stealth WebSocket miners in 2025. What each extension still misses.