BragJack Turned Extension Access into AI Agent Commands
An installed malicious extension crossed trusted browser-agent channels in five research demonstrations. The permissions, exposed capabilities and fixes differed by product.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Webform Can Turn Stored Data Into Executable Logic
Inspect display settings and verify the installed fix.
Code Can Run Before the Login Boundary
Verify the product branch and the installed update.
The Fake TV App That Can Watch Your Screen, Steal Your PIN and Stop You Removing It
A fake TV app can cut Google Play Protect off from the network, watch a victim’s screen, steal banking PINs and resist removal.
Attackers Are Trying to Turn a WordPress Page Into a Server Foothold
Patch every node and investigate attempted file writes.
The FBI Confirms Its Jobs Portal Was Compromised but Not What Was Taken
A supplier failure is acknowledged. The data scope remains uncertain.
Attackers Are Exploiting the System That Manages the Rest of Your Network
A compromised orchestrator is not just another vulnerable server. It is the trusted control point for the edge devices around it.
EvilTokens Compromised 12,000 Inboxes and Let AI Choose the Next Victim
The AI did more than write convincing phishing messages. It read stolen mailboxes, mapped trust and told criminals which relationships were most valuable to abuse.
BIG-IP APM’s OAuth Server Role Opens an Exploited Code Execution Path
F5 says attackers are already exploiting a critical BIG-IP APM flaw. The first job is not simply to patch, but to preserve evidence and find out whether the gateway has already been touched.
Chrome Fixed 11 Critical Flaws Before the CVE Databases Could Catch Up
Chrome 154 fixed 11 critical flaws across graphics and browser components. Its database lag shows why teams must act on vendor evidence and verify running builds.