HashJack attack shows AI browsers can be fooled with a simple ‘#’

Hashtag-do-whatever-I-tell-you

Cato Networks says it has discovered a new attack, dubbed "HashJack," that hides malicious prompts after the "#" in legitimate URLs, tricking AI browser assistants into executing them while dodging traditional network and server-side defenses....