I'm wondering - does this mean that malicious websites might also be able to drive our browser agents? And if this is the level of security in the SOTA software companies, what does it mean about all these open source agents we all install?
Very surprised with the findings! The blast radius is concerning. I'm wondering what the AI era will bring next in line!
BTW what does BragJack stands for?
More to come! Thanks!
BRowser AGent JACKing
I wonder how attackers might exploit this new concept.. a new attack surface just emerged!