Related:

Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet

https://news.ycombinator.com/item?id=45000894

Comet AI browser can get prompt injected from any site, drain your bank account

https://news.ycombinator.com/item?id=45004846