Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-12 · source-backed
Zenity Labs found calendar invites can trigger file system exfiltration via Perplexity Comet. Comet was 85% more vulnerable to phishing than standard Chrome. Agents can't differentiate user instructions from ingested content — this affects the entire agentic browser category. Zenity Labs
Each link below shares sources, entities, or timing with this story.
Zenity Labs disclosed a family of critical vulnerabilities in Perplexity Comet and other agentic browsers. Two exploit paths via indirect prompt injection: (1) zero-click compromise via calendar invites granting file system access; (2) agent privilege assumption enabling 1Pass...
Zenity Labs disclosed two attack chains: silent local file system exfiltration while the agent returns expected results, and credential theft from 1Password via agent-authorized workflow abuse. Both trigger without user interaction through attacker-controlled content in routin...
Zero server costs. Zero network latency. Zero privacy concerns. Full LLM inference, running in a browser tab. Chrome 138+ now ships the Prompt API, a built-in JavaScript interface for running Gemini Nano entirely on-device. After a one-time 1.7GB model download, you get client...
Google disclosed that the last two Chrome versions, both shipped in June, patched 1,072 bugs versus 1,036 across the prior 23 releases spanning two years. An internally built Gemini-powered harness searches the codebase for vulnerabilities while suppressing false positives; on...
Google pushed Flash to general availability and rolled out Gemini in Chrome (Windows/Mac for AI Pro/Ultra in the US), Gemini Omni globally to subscribers 18+, and a US Daily Brief (Google Gemini). The Flash GA is the builder-relevant piece: frontier-ish quality at speed and pr...
Every browser agent you've ever used works the same way. Screenshot the page, parse the pixels, figure out what to click, click it, screenshot again. It's slow, it's brittle, and it breaks every time a site changes its layout. That entire paradigm dies on June 2. Google's Chro...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.