TLDR InfoSec · MISCELLANEOUS
COMETJACKING: ONE CLICK CAN TURN PERPLEXITY'S COMET AI BROWSER INTO A DATA THIEF
Summary from the TLDR InfoSec newsletter
CometJacking affects Perplexity's Comet AI browser by allowing attackers to use a malicious link to inject hidden prompts and steal sensitive user data, such as emails and calendars, by exploiting the browser's own access. Experts warn that this demonstrates the broader risks of AI-driven browsers and have urged stricter agent prompt security to prevent future data theft campaigns