Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

'The attack requires no exploit, no user clicks, and no explicit request forsensitive actions': Experts say Perplexity's AI Comet browser can be hijacked to steal your passwords

Perplexity Comet Mobile.

  • Zenity researchers uncovered PleaseFix, a zero-click indirect prompt injection flaw in Comet browser
  • Malicious calendar invites could trick the AI into exfiltrating passwords and sensitive files without user awareness
  • Bug patched with restrictions on file:// access, preventing agents from reading local filesystem
Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.