HashJack: A Novel Exploit Leveraging URL Fragments To Deceive AI Browsers
Security researchers at Cato CTRL have uncovered HashJack. This innovative indirect prompt-injection attack hides harmful commands in the fragment portion of URLs after the β#β symbol. This technique turns trusted websites into weapons against AI browser assistants like Perplexityβs Comet, Microsoftβs Copilot in Edge, and Googleβs Gemini in Chrome. How The Attack Unfolds HashJack exploits [β¦]
The post HashJack: A Novel Exploit Leveraging URL Fragments To Deceive AI Browsers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.



