LinksAug 25, 2025

Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet

Where is the profit going to come from? — "I'm used to seeing people misjudge and underestimate the severity of this problem, but it looks like the tide is finally turning there."

“I strongly expect that the entire concept of an agentic browser extension is fatally flawed and cannot be built safely.”
Simon Willison

Go To The Link

Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet

The security team from Brave took a look at Comet, the LLM-powered "agentic browser" extension from Perplexity, and unsurprisingly found security holes you can drive a truck through. The vulnerability …...