News

HashJack Attack Uses URL ‘#’ to Control AI Browser Behavior

  • Deeba Ahmed--HackRead
  • published date: 2025-11-29 14:03:12 UTC

Cybersecurity firm Cato Networks reveals HashJack, a new AI browser vulnerability using the '#' symbol to hide malicious commands. Microsoft and Perplexity fixed the flaw, but Google's Gemini remains at risk.

On November 25, 2025, cybersecurity firm Cato Networks revealed HashJack, a new threat where the simple pound sign (#) in a web address (URL) hides malicious instructions for AI browser assistants li… [+2571 chars]