'The attack requires no exploit, no user clicks, and no explicit request for sensitive actions': Experts say Perplexity's AI Comet browser can be hijacked to steal your passwords

Zenity researchers uncovered PleaseFix, a zero-click indirect prompt injection flaw in Comet browser Malicious calendar invites could trick the AI into exfiltrating passwords and sensitive files ...