Story thread · 4 reports / 4 sources

PleaseFix: Zenity Demonstrates Zero-Click Takeover of Every Major Agentic Browser

forkast.news · 3dShare

Zenity Labs disclosed a new vulnerability class at Black Hat on August 5 that it calls Intent Collision — a zero-click attack vector that hijacks agentic browsers by injecting hidden instructions into any web page the agent visits. The demonstration compromised Claude in Chrome, Gemini, Perplexity Comet, ChatGPT Atlas, and Copilot Edge without requiring the […]

First report: OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts — wired.com, 5d