TLDR InfoSec · MISCELLANEOUS

COMETJACKING: ONE CLICK CAN TURN PERPLEXITY'S COMET AI BROWSER INTO A DATA THIEF

thehackernews.com2 min read

Summary from the TLDR InfoSec newsletter

CometJacking affects Perplexity's Comet AI browser by allowing attackers to use a malicious link to inject hidden prompts and steal sensitive user data, such as emails and calendars, by exploiting the browser's own access. Experts warn that this demonstrates the broader risks of AI-driven browsers and have urged stricter agent prompt security to prevent future data theft campaigns