@thegalbash

Making sense of distributed systems at scale๐Ÿงฉ. Excited about #serverless and cloud โ˜๏ธ Director of Engineering @epsagon. Views are my own.

 Tel Aviv, Israel
medium.com/@galbash
Joined January 2018
  • Tweets2.1K
  • Following5.5K
  • Followers6.2K
62Media
Gal Bashan retweeted
Gal Weizman@WeizmanGal22h
We blocked an agent from installing real npm malware on a customer's machine - pretty standard The unusal part? It was an instruction that came from an AGENTS.md file that the customer never saw before The folder in which it happened led to a pretty fun research ~/Downlaods ๐Ÿงต
3
3
1
10
838
Gal Bashan retweeted
Gal Weizman@WeizmanGalSep 28
Wasnโ€™t on my bingo card for 2026: @FoxNews just covered my #BragJack research - Thanks @cyberguy ! More to come :) Full research ๐Ÿ‘‡
Gal Weizman@WeizmanGalSep 16
Excited to finally share my recent research, where I managed to hack Chrome, Comet, Edge, Opera and Claude in Chrome using one single browser extension 2 CVEs & $20,000 in bounties ๐Ÿ™‚ Introducing - BragJack! forever.security/blog/bragjaโ€ฆ

BragJack: How We Hijacked 5 Of The World's Most Popular Browsers Using Their Built-In AI Assistants...

We hijacked the agents inside Gemini Live in Chrome, Microsoft Edge, Opera Neon, Perplexity Comet, and Claude in Chrome - using one single extension

forever.security
2
21
1,079
Gal Bashan retweeted
Gal Weizman@WeizmanGalSep 23
ื›ื—ืœืง ืžื”ื“ื’ืžืช ืžืชืงืคื” ื‘Edge, ื”ืจื›ื‘ืชื™ ืคืจื•ืžืคื˜ ืฉืžื‘ืงืฉ ืกื™ื›ื•ื ืžื™ื™ืœื™ื ืจื’ื™ืฉื™ื ื•ื”ื–ืœื’ืชื ืœ[email protected] ื”ืคื•ื ืงืฆื™ื” ืื•ืชื” ื ื™ืฆืœืชื™, ืžืฉื•ื ืžื”, ืกื™ื ื ื” ืืช ื”ืชื• ืด@ืด, ืžื” ืฉื“ืคืง ืืช ื”ืžืชืงืคื” ืœื’ืžืจื™ ื”ืžืขืงืฃ? ืดattacker at gmail.comืด ืขืฉื” ืืช ื”ืขื‘ื•ื“ื” ื”WAY BYPASS ืฉืœ ื”ืขื™ื“ืŸ ื”ื—ื“ืฉ? ๐Ÿค”
Gal Weizman@WeizmanGalSep 20
ื‘ืžื—ืงืจ #BragJack, ืื ื™ ื—ื•ืฉื‘ ืฉื”ืžืชืงืคื” ืขืœ Edge ื”ื™ื™ืชื” ื”ื›ื™ ืžืขื ื™ื™ื ืช, ื›ืฉื—ืœืง ืžืžื ื” ื”ื ื™ื‘ ืืช CVE-2026-55945 ื›ืฉMicrosoft ื”ืฉื™ืงื• ืืช ื”ืกื•ื›ืŸ ื”ืžื•ื‘ื ื” ืฉืœื”ื ื‘Edge, ื”ื ืคื™ืชื—ื• ื“ืฃ ื”ืฉืงื” ื™ื™ืขื•ื“ื™ ื“ืจื›ื• ื”ื™ื” ืืคืฉืจ ืœืœืžื•ื“ ืืช ื”ืคื™ืฆืณืจ ื”ื—ื“ืฉ ื‘ื“ืคื“ืคืŸ ืœืคื ื™ ื”ื“ื™ื•ื•ื— ืฉืœื™, ื–ื” ื”ื™ื” ืดhttps://www[.]microsoft[.]com/en-us/edgeืด ๐Ÿงต
2
2
19
2,586
Gal Bashan retweeted
Gal Weizman@WeizmanGalSep 24
ื”ืžื•ืŸ ื”ืชืขื ื™ื™ื ื• ื‘ื”ืชื™ื™ื—ืกื•ืช ืฉืœื™ ืœprompt forcing ื‘ืžื—ืงืจ #BragJackย ื”ืื—ืจื•ืŸ ืฉืคืจืกืžื ื• ื›ืชื‘ืชื™ ื›ืžื” ืžื™ืœื™ื ืขืœ ืื•ืคื™ ื”ืžืชืงืคื”, ืœืžื” ื”ื™ื ืฉื•ื ื” ืžprompt injection ื•ืื™ืš ื”ื™ื ื”ืจื—ื™ื‘ื” ืืช ื”ื”ืกืชื›ืœื•ืช ืฉืœื ื• ืขืœ ื”ื“ืจืš ื‘ื” ืžืขืจื›ื•ืช ืื’ืณื ื˜ื™ื•ืช ืขืœื•ืœื•ืช ืœื”ื™ืชืงืฃ forever.security/blog/promptโ€ฆ

Prompt Forcing: The Scarier Sibling of Prompt Injection ยท Forever Security

Breaking down a newly discovered prompt attack technique that isn't prompt injection.

forever.security
2
15
678
Gal Bashan retweeted
Gal Weizman@WeizmanGalSep 20
ื‘ืžื—ืงืจ #BragJack, ืื ื™ ื—ื•ืฉื‘ ืฉื”ืžืชืงืคื” ืขืœ Edge ื”ื™ื™ืชื” ื”ื›ื™ ืžืขื ื™ื™ื ืช, ื›ืฉื—ืœืง ืžืžื ื” ื”ื ื™ื‘ ืืช CVE-2026-55945 ื›ืฉMicrosoft ื”ืฉื™ืงื• ืืช ื”ืกื•ื›ืŸ ื”ืžื•ื‘ื ื” ืฉืœื”ื ื‘Edge, ื”ื ืคื™ืชื—ื• ื“ืฃ ื”ืฉืงื” ื™ื™ืขื•ื“ื™ ื“ืจื›ื• ื”ื™ื” ืืคืฉืจ ืœืœืžื•ื“ ืืช ื”ืคื™ืฆืณืจ ื”ื—ื“ืฉ ื‘ื“ืคื“ืคืŸ ืœืคื ื™ ื”ื“ื™ื•ื•ื— ืฉืœื™, ื–ื” ื”ื™ื” ืดhttps://www[.]microsoft[.]com/en-us/edgeืด ๐Ÿงต
2
2
1
19
4,742
Gal Bashan retweeted
Gal Weizman@WeizmanGalSep 17
ื”ืฆืขืชื™ ืœื›ื ืœื‘ื—ื•ืจ ื“ืคื“ืคืŸ ืื—ื“ ืžืชื•ืš ืืจื‘ืขื” - ืืชืžื•ืœ ืงื™ื‘ืœืชื ื—ืžื™ืฉื”! ืงืจืืชื™ ืœืžื—ืงืจ BRowser AGent JACKing (ืื• ื‘ืงื™ืฆื•ืจ, BragJack), ื•ื”ื“ื’ืžืชื™ ื”ืฉืชืœื˜ื•ืช ืžื•ื—ืœื˜ืช ืฉืœ ื”ืกื•ื›ื ื™ื ื”ื—ื“ืฉื™ื ืฉื‘ืื™ื ืžื•ื‘ื ื™ื ื‘ื“ืคื“ืคื ื™ื ืžืื—ืจ ื•ืžื“ื•ื‘ืจ ื‘ืžื—ืงืจ ื“ื™ ืขืžื•ืก, ืขื ืกืจื˜ื•ืŸ ื‘ืื•ืจืš 18 ื“ืงื•ืช(!) ื•ื‘ืœื•ื’ื™ื ื“ื™ ืืจื•ื›ื™ื, ื‘ื•ืื• ื ืคืจืง ืืช ื–ื” ืจื’ืข ๐Ÿงต
Gal Weizman@WeizmanGalSep 15
ืžื—ืจ ืืคืจืกื ืžื—ืงืจ ืฉืื ื™ ืขื•ื‘ื“ ืขืœื™ื• ืชืงื•ืคื” ืื™ื–ื” ื“ืคื“ืคืŸ ื”ื™ื™ืชื ืจื•ืฆื™ื ืœืจืื•ืช ืฉื?
5%Comet
6%Opera
78%Chrome
11%Edge
98 votes โ€ข Final results
5
4
40
3,799
Gal Bashan retweeted
Dark Reading
@DarkReadingSep 16
BragJack Turns a Browserโ€™s Agentic AI Against It (Forever Security) bit.ly/3UV8bms by Elizabeth Montalbano

BragJack Attack Can Turn a Browser's Agentic AI Against It

A new type of attack hijacks AI assistants built directly into a browser to access sensitive information, execute malicious actions, and exfiltrate data.

darkreading.com
4
2
2
8
8,761
Gal Bashan retweeted
Gal Weizman@WeizmanGalSep 16
Thanks for the cover! @DarkReading
Dark Reading
@DarkReadingSep 16
BragJack Turns a Browserโ€™s Agentic AI Against It (Forever Security) bit.ly/3UV8bms by Elizabeth Montalbano

BragJack Attack Can Turn a Browser's Agentic AI Against It

A new type of attack hijacks AI assistants built directly into a browser to access sensitive information, execute malicious actions, and exfiltrate data.

darkreading.com
1
12
1,189
BragJack Attack Can Turn a Browser's Agentic AI Against It darkreading.com/endpoint-secโ€ฆ

BragJack Attack Can Turn a Browser's Agentic AI Against It

A new type of attack hijacks AI assistants built directly into a browser to access sensitive information, execute malicious actions, and exfiltrate data.

darkreading.com
3
1
8
2,054
Gal Bashan retweeted
Gal Weizman@WeizmanGalSep 16
Excited to finally share my recent research, where I managed to hack Chrome, Comet, Edge, Opera and Claude in Chrome using one single browser extension 2 CVEs & $20,000 in bounties ๐Ÿ™‚ Introducing - BragJack! forever.security/blog/bragjaโ€ฆ

BragJack: How We Hijacked 5 Of The World's Most Popular Browsers Using Their Built-In AI Assistants...

We hijacked the agents inside Gemini Live in Chrome, Microsoft Edge, Opera Neon, Perplexity Comet, and Claude in Chrome - using one single extension

forever.security
13
36
6
251
28,731
Gal Bashan retweeted
Gal Weizman@WeizmanGalSep 15
ืื ื™ ืžืคืจืกื ืžื—ืงืจ ืขืœ ืชื•ืกืคื™ื ืขื 1,000,000 ื”ืชืงื ื•ืช ืขื backdoors ืœื”ืฉืชืœื˜ื•ืช ืžืœืื” ืขืœ ื”ื“ืคื“ืคืŸ: ๐Ÿฆ— ๐Ÿฆ—๐Ÿฆ— ื—ื•ืงืจื™ื ืžื•ืฆืื™ื ืชื•ืกืฃ ืขื 30,000 ื”ืชืงื ื•ืช ืฉื’ื•ื ื‘ oauth tokens: ๐Ÿ˜ฑ๐Ÿ˜ฑ๐Ÿ˜ฑ ื”ืžืžืฆื ืฉืœื™ ืžืขื•ืœื ืœื ืชื•ืงืŸ ืื’ื‘, ืžื“ื•ื‘ืจ ื‘ืงืžืคื™ื™ืŸ ืคืขื™ืœ (ืงื™ืฉื•ืจ ื‘ืชื’ื•ื‘ื”)
BleepingComputer
@BleepinComputerSep 14
Twitch extension with 30K installs exposes usersโ€™ OAuth tokens bleepingcomputer.com/news/seโ€ฆ bleepingcomputer.com/news/seโ€ฆ

Twitch extension with 30K installs exposes usersโ€™ OAuth tokens

A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.

bleepingcomputer.com
6
1
53
7,308
Gal Bashan retweeted
Gal Weizman@WeizmanGalJun 11
ยน๐ŸšจACT IMMEDIATELY๐Ÿšจ SiderAI Chrome extension exposes its 10M+ users to a critical vulnerability Attackers can exploit it to perform UXSG which could translate to leakage of information, invocation of operations and even account takeover Read the technical analysis below ๐Ÿงต
1
2
2
6
2,059
Gal Bashan retweeted
Gal Weizman@WeizmanGalMar 3
ื”ืืœื’ื•ืจื™ืชื ืžืชืขืœืขืœ ื‘ื™ ืžืฉื•ื ืžื”, ืื‘ืœ ืื’ื™ื“ ื‘ื›ืœ ื–ืืช: * ืžืฆืืชื™ ื—ื•ืœืฉื” ื—ืžื•ืจื” ื‘chrome ืฉืื™ืคืฉืจื” ืœื™ ืœื”ืฉืชืœื˜ ืขืœ gemini * ื”ื“ืจืš ื‘ื” ืขืฉื™ืชื™ ืืช ื–ื” ื”ื™ื ื˜ื›ื ื™ืงื” ื—ื“ืฉื” ืฉืžืืคืฉืจืช ืœืชืงื•ืฃ browsers/extensions/side-panels ื•ื–ื• ืœื ืชื”ื™ื” ื”ืคืขื ื”ืื—ืจื•ื ื” ืฉืชืฉืžืขื• ืขืœื™ื” (ืขื•ื“ ืขืœ ื–ื” ื‘ืฉืจืฉื•ืจ)
Gal Weizman@WeizmanGalMar 3
Recently I showed GLIC JACK Web extensions were capable of setting DeclarativeNetRequest rules to intercept network in WebView components, which is how the new Gemini Live in Chrome pane is embedded From there, I took over it entirely using DNR rules only ๐Ÿ›Ž๏ธ Here's how ๐Ÿงต๏ธ
11
5
1
185
20,858
Spotted in Times Square, New York Vote For Eden Golan! #StandWithIsrael
201
1,798
50
16,908
315,114
Gal Bashan retweeted
Brianna Wu
@BriannaWu11 May 2024
Hereโ€™s the thing. I liked Greta Thunberg before this. Yeah, she was annoying, but she was a girl trying to make an impact for a cause she believed in. But now sheโ€™s leading some antisemitic hate mob of 20,000 people to harass a young woman? No, fuck you.
798
1,818
158
24,027
607,806
It appears that this is what was REALLY happening inside the Eurovision arena last night, amid overdubs by the Eurovision broadcaster. I donโ€™t know about anyone else, but to me this is MORE of a testament to Edenโ€™s bravery, and I despise the baying mob of leftists and Islamists even more. Letโ€™s jump on the Eurovision apps and sites tonight โ€ฆand throw a ton of votes her way to say a big FU ๐Ÿ–• to the haters!!!
328
840
119
9,557
1,269,272
The bravest woman in Europe
496
1,516
85
18,826
352,948
Gal Bashan retweeted
Hen Mazzig
@HenMazzig11 May 2024
This sweet girl #EdenGolan in tears after finishing her #Eurovision2024 performance. Canโ€™t imagine what she is going through facing all this hate, what a queen. Vote 06 ๐Ÿ’œ๐Ÿ‡ฎ๐Ÿ‡ฑ
1,945
2,139
1,950
25,689
4,085,627
Lebanese singer doing Hurricane in Arabic! ๐Ÿ‡ฑ๐Ÿ‡ง๐Ÿ‡ฎ๐Ÿ‡ฑ Listen to Carine Bassili, a Lebanese singer, sending her support to Eden Golan, with an Arabic version of the song Hurricane, Israelโ€™s song to the Eurovision. Voting #06 for Israel! โค๏ธโค๏ธ๐Ÿ‡ฎ๐Ÿ‡ฑ๐Ÿ‡ฎ๐Ÿ‡ฑ
179
870
63
5,886
208,511
You are already a winner! #Eurovision2024
166
1,322
39
14,600
169,634
Load more