TechFlow news, August 26 — According to Decrypt, Brave Software has disclosed a critical security vulnerability in Perplexity AI's Comet browser. Attackers could exploit hidden instructions embedded in webpages to trick the AI assistant into revealing users' private data, including emails and code. Brave researchers demonstrated that when users asked Comet to summarize a Reddit page containing hidden commands, the AI assistant executed those commands. Although Perplexity claims the issue was fixed before disclosure and asserts no user data was compromised, Brave maintains the vulnerability remained exploitable for weeks after the fix and warns that Comet's architectural design makes it susceptible to further attacks.
Add to Favorites
Share to Social Media
