Critical Security Flaws in AI-Powered Browsers Enable Zero-Click Attacks and Data Breaches

Every major AI browser demoed at Black Hat could be hijacked by looking at the wrong web page.

Researchers from Zenity Labs revealed at Black Hat USA in Las Vegas that AI-powered browsers from OpenAI, Google, Anthropic, Microsoft, and Perplexity are vulnerable to prompt-injection and zero-click exploits. These flaws allow attackers to hijack AI agents, steal data, compromise accounts, and perform unauthorized actions, causing significant harm to users' privacy and property.

See the full article