AI‑enhanced browsers such as OpenAI’s ChatGPT Atlas and Perplexity’s Comet promise to automate web tasks, but cybersecurity experts warn that their deep access to user data creates significant privacy and security concerns. Researchers from Brave highlight prompt‑injection attacks as a systemic challenge, where malicious web content can trick agents into exposing credentials or performing unwanted actions. Both OpenAI and Perplexity have introduced mitigations like logged‑out modes and real‑time detection, yet experts stress that the threat remains unresolved. Users are advised to limit agent permissions and adopt strong authentication to safeguard personal information. Read more →

Brave announced a new feature for its AI‑driven search suite, Ask Brave, that delivers longer, report‑style answers alongside its existing AI Answers summaries. The enhancement automatically detects query intent, offers richer content such as videos, news articles, and product links, and integrates a chat mode powered by Deep Research. Users can trigger Ask Brave with a double question‑mark (??) or the ask button, and the company says the feature will boost the already high volume of AI‑generated responses while preserving privacy through encrypted, auto‑deleting chats. Read more →

Anthropic’s Claude AI Chrome extension was tested against dozens of attack scenarios, showing a significant success rate when safety mitigations were absent. The company introduced site‑level permissions and user confirmations that cut the success rate, but independent researchers still label the remaining risk as catastrophic. Recent related incidents involving Perplexity’s Comet extension underscore the broader challenge of securing AI agents in browsers. Anthropic plans further testing before broader release, emphasizing the need for stronger protections and user awareness. Read more →