New #HashJack attack uses the “#” in a URL to hide commands that AI browsers like Google’s Gemini, Microsoft’s Copilot, and Perplexity’s Comet can read and act on - turning any legit site into a potential attack vector.
Read: https://hackread.com/hashjack-attack-url-control-ai-browser-behavior/