Skip to content
ThreatCluster

HashJack: New Indirect Prompt Injection Technique Targets AI Browsers

First seen 2 Dec 2025, 18:33 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A new attack technique named HashJack has been identified, which exploits AI browsers by using a simple '#' character to perform indirect prompt injections. This vulnerability poses risks to users relying on AI-driven browsing experiences, potentially compromising their security. The specifics of the attack method and its implications for cybersecurity are currently under analysis.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

More articles in this cluster (2)