ARTICLE · 23 SEPTEMBER 2026
Ankura CTIX FLASH Update – September 22, 2026
This collection of insights from Ankura explores critical challenges facing multiple industries in 2026, from cybersecurity threats targeting AI assistants to the evolving landscape of freight capacity, cryptocurrency enforcement, and healthcare compliance. The articles examine how organizations navigate regulatory complexity, operational constraints, and emerging risks across financial services, logistics, healthcare, and technology sectors.
Malware Activity
BragJack POC Attack Shows How Malicious Extensions Can Hijack Browser AI Assistants
BragJack is a proof-of-concept attack that shows how a single malicious browser extension can hijack AI assistants built into Chromium-based browsers, Chrome’s Gemini Live, Perplexity Comet, Microsoft Edge, Opera Neon, and Anthropic’s Claude in Chrome. Once the extension is installed, it can run without further user interaction, abusing declarativeNetRequest (DNR) and content scripts to seize the trusted message channels between an AI “brain” (the model on a vendor site) and its “body” (privileged browser components). Instead of classic prompt injection, BragJack uses “prompt forcing,” where the extension feeds entire prompts and follow-up instructions directly into the agent’s control plane, so model guardrails never see the attack as untrusted content. In Chrome, this allowed code execution inside Gemini’s context, enabling local file reads, screenshots, and potential camera/mic
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
View source
