Researchers disclose zero-click vulnerabilities in AI-enabled web browsers

Security firm Zenity identified around 20 flaws in AI browsers from vendors including OpenAI, Anthropic, and Google. These vulnerabilities allow attackers to bypass same-origin policies via indirect prompt injection, enabling unauthorized actions like account takeovers and data exfiltration.

Featured · Michael Bargury, Stav Cohen