hashjack

AI browsers — the new generation of agentic assistants that read, reason, and act on web pages for you — are now being weaponized by a fresh class of attacks that hide instructions inside otherwise normal web content, threatening account security, private data, and the very notion of what a...

A fresh prompt-injection variant called HashJack has staked out an unexpected and stealthy attack surface: the text that appears after the “#” in a URL — the fragment identifier — can be weaponized to deliver natural‑language instructions to AI-powered browser assistants, tricking them into...

A new prompt-injection variant called HashJack exposes a surprising and urgent risk in AI-powered browser assistants: by hiding natural‑language instructions after the “#” fragment in otherwise legitimate URLs, attackers can coerce assistants to produce malicious guidance, insert fraudulent...