A new BragJack attack shows how browser extensions can abuse built-in AI assistants to access files, screenshots, emails, and more.