Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-11 · source-backed
Zenity Labs disclosed a family of critical vulnerabilities in Perplexity Comet and other agentic browsers. Two exploit paths via indirect prompt injection: (1) zero-click compromise via calendar invites granting file system access; (2) agent privilege assumption enabling 1Password vault theft. PleaseFix evolves the ClickFix social engineering technique — tricks agents instead of humans. Zenity Labs
Each link below shares sources, entities, or timing with this story.
Zenity Labs found calendar invites can trigger file system exfiltration via Perplexity Comet. Comet was 85% more vulnerable to phishing than standard Chrome. Agents can't differentiate user instructions from ingested content — this affects the entire agentic browser category....
Zenity Labs disclosed two attack chains: silent local file system exfiltration while the agent returns expected results, and credential theft from 1Password via agent-authorized workflow abuse. Both trigger without user interaction through attacker-controlled content in routin...
Anthropic Trends Report, Cognition/SWE-grep, Zenity Labs, MIT CSAIL, Cursor Blog
trycompai/crm launched July 31 with the inversion "the agent is not a feature of the CRM; the CRM is where the agent keeps its notes" (GitHub). Runs on eve, Vercel's filesystem-first durable-agent framework, with 18 authored tools, 4 skills as versioned markdown, and a resumab...
Slack's MCP server hit general availability with 25x growth in tool calls. Launch partners: OpenAI, Anthropic, Google, Perplexity, Cursor, Vercel, Notion, Cognition. Any MCP-compatible agent can now search Slack channels, post messages, and access conversational context. Slack...
Two thirds. Not two thirds of a contrived jailbreak set. Two thirds of realistic malicious issue requests, against the exact three tools most of the people reading this run daily. Ankur Singh, Jinqiu Yang, and Tse-Hsun Chen built IssueTrojanBench across four attack categories...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.