Prompt injection flaw in Opera Neon
Oct 31, 2025
Attackers can embed malicious instructions in hidden HTML elements and other non-rendered markup that remains invisible to users but is fully accessible to the AI assistant.
Unseeable prompt injections in screenshots: more vulnerabilities in Comet and other AI browsers
Oct 21, 2025
AI browsers remain vulnerable to prompt injection attacks via screenshots and hidden content, allowing attackers to exploit users' authenticated sessions.
Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet
Aug 20, 2025
The attack we developed shows that traditional Web security assumptions don't hold for agentic AI, and that we need new security and privacy architectures for agentic browsing.
