Cyb3rius
@cyb3rius
· Sep 17
Do you need malware to hijack a browser AI assistant?No — one ordinary browser extension is enough. Researchers at Forever Security showed a single extension could seize control of the AI assistants built into five Chromium-based products.What happened: The team demonstrated that an extension running with ordinary permissions could reach Gemini Live in Chrome, Perplexity's Comet, Microsoft Edge, Opera Neon, and Anthropic's Claude for Chrome. Because those assistants inherit the browser's session and permissions, a hijacked agent can read pages and act on the user's behalf. The weakness is architectural, not a single patchable coding bug.Key numbers: 1 extension was enough to compromise AI assistants in 5 Chromium-based browsers5 products in scope: Chrome, Comet, Edge, Opera Neon, and Claude for Chrome0 CVEs required — the flaw is design, not a memory-corruption defectWhy it matters: Users treat AI assistants as trusted helpers, but any extension that reaches them becomes a proxy that can read, click, and exfiltrate on the user's behalf.Bottom line: If your browser agent trusts your extensions, your extensions effectively own your AI assistant.
0