hijack

Ghostscript flaw allows hackers to hijack servers via PDF uploads

by
Ghostscript flaw allows hackers to hijack servers via PDF uploads

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution via specially crafted PDF files. The flaw was discovered on August 23 by researchers at Defiant platform Wordfence using their AI-powered system Argus. Ghostscript is a PostScript and PDF interpreter that can render PDFs as images, … Read more

BragJack attacks hijack AI browser agents through malicious extensions

by
BragJack attacks hijack AI browser agents through malicious extensions

Security researcher Gal Weizman of Forever Security has revealed a new attack technique that can hijack the AI ​​assistants built into popular browsers using a single malicious browser extension. The proof-of-concept, called BragJack, was demonstrated using five Chromium-based browsers or browser assistants: Google Chrome’s Gemini Live, Perplexity Comet, Microsoft Edge, Opera Neon, and Anthropic’s Claude … Read more