Search: “Comet”

25 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 24 Malware 16 Ransomware 11 Exploit / PoC 10 Industry 6 Threat actor 6 Data breach 4 AI safety & security 4 Research 3 Policy & legal 3 Phishing & fraud 2 Tools 2 AI industry 1 AI tools & infra 1

SeverityAll critical 34 high 17 medium 25 low 14 info 5

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Researchers showed a single browser extension could hijack AI agents in Chrome, Edge, Comet, Opera Neon and Claude in Chrome, earning $20,000 in bounties.

Forever Security demonstrated that a browser extension with two common permissions could seize the trusted page controlling built-in AI assistants in five Chromium-based products and drive the agent, read local files, or access the camera. Chrome's flaw was fixed as CVE-2026-0628 (CVSS 8.8) in Chrome 143.0.7499.192, and Microsoft fixed CVE-2026-55945 (CVSS 4.2) in Edge 150.0.4078.48. Perplexity Comet was the worst case: a hijacked agent could read any file, leak browsing history, take screenshots, and act as the user via an unsecured test subdomain. All attacks require a malicious extension already installed; no in-the-wild exploitation or KEV listing was reported as of September 16, 2026.

The Hacker Newsupdated 16:06 UTC · 6h agofirst 14:36 UTC · 7h agoAI safety & security 16 sources CVE-2026-0628 CVE-2026-55945

Financially Motivated Threat Actor BREEZE COMET Targets Brazil

Google Threat Intelligence details BREEZE COMET, a financially motivated group manipulating Brazilian payment systems and banking software to conduct fraudulent transfers since 2024.

Mandiant and Google Threat Intelligence Group (GTIG) track this activity as BREEZE COMET (formerly UNC5669), active since 2024 against Brazilian financial services, retail, and eCommerce organizations. The actor specializes in manipulating payment systems and banking software to conduct fraudulent transfers. The activity overlaps with operations publicly reported as Plump Spider and SHADOW-AETHER-064. The report details the group's tactics, toolkit, mitigations, and detections for this active and developing threat.

Google Threat IntelligenceSep 1, 14:00 UTC · 15d agoThreat actor in the wild

Search: “Comet”

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Financially Motivated Threat Actor BREEZE COMET Targets Brazil

CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief

Researchers disclose vulnerabilities in IP KVMs from four manufacturers

Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes

The Zoom attack you didn't see coming

Experts Find AI Browsers Can Be Tricked by PromptFix Exploit to Run Malicious Hidden Prompts

Climate Change Warps Brains in the Womb, Scientists Discover

New "HashJack" attack can hijack AI browsers and assistants

HashJack Indirect Prompt Injection Weaponizes Websites

Prompt Injection in AI Browsers

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

Researchers Warn of Security Gaps in AI Browsers

xkcd on Voting Computers

Researchers Trick AI Browsers Into Leaking Credentials

Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials

Browser agents don't always respect your privacy choices

Gartner Calls For Pause on AI Browser Use

Proactive Threat Identification Neutralizes Remote Access Trojan Efficacy

“PromptFix” Attacks Could Supercharge Agentic AI Threats

Un vistazo a la colosal base de datos que usa el ICE para identificar y deportar personas

The $200,000 Zoom call

C.A.S hacktivists attack Russian organizations using rare RATs

Spain arrests 16 for working with the Mekotio and Grandoreiro malware gangs

Malware Hunter, the project developed by Shodan and Recorded Future to find C&C Servers