Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes
Researchers demonstrated a vulnerability in Perplexity's Comet AI browser by successfully executing a phishing attack in under four minutes. The attack exploits the browser's autonomous AI capabilities by manipulating its reasoning process to bypass security guardrails. This highlights significant security risks in agentic AI systems that act autonomously across multiple websites on behalf of users.
Summary
Researchers demonstrated a vulnerability in Perplexity's Comet AI browser by successfully executing a phishing attack in under four minutes. The attack exploits the browser's autonomous AI capabilities by manipulating its reasoning process to bypass security guardrails. This highlights significant security risks in agentic AI systems that act autonomously across multiple websites on behalf of users.