Technologies

Perplexity’s Comet AI Web Browser Had a Major Security Vulnerability

Essentially, invisible prompts on websites could make Comet’s AI assistant do things it wasn’t asked to do.

Comet, Perplexity’s new AI-powered web browser, recently suffered from a significant security vulnerability, according to a blog post last week from Brave, a competing web browser company. The vulnerability has since been fixed, but it points to the challenges of incorporating large language models into web browsers.

Unlike traditional web browsers, Comet has an AI assistant built in. This assistant can scan the page you’re looking at, summarize its contents or perform tasks for you. The problem is that Comet’s AI assistant is built on the same technology as other AI chatbots, like ChatGPT.

AI chatbots can’t think and reason the same way humans can, and if they read a piece of content meant to manipulate its output, it may end up following through. This is known as prompt engineering.

(Disclosure: Ziff Davis, CNET’s parent company, in April filed a lawsuit against OpenAI, alleging it infringed Ziff Davis copyrights in training and operating its AI systems.)

A representative for Brave didn’t immediately respond to a request for comment.

AI companies try to mitigate the manipulation of AI chatbots, but that can be tricky, as bad actors always look at novel ways to break through protections.

«This vulnerability is fixed,» said Jesse Dwyer, Perplexity’s head of communications in a statement. «We have a pretty robust bounty program, and we worked directly with Brave to identify and repair it.»

Test used hidden text on Reddit

In its testing, Brave set up a Reddit page with invisible text on the screen and asked Comet to summarize the on-screen content. As the AI processed the page’s content, it couldn’t distinguish between the malicious prompts and began feeding Brave’s testers sensitive information.

In this case, the hidden text enabled Comet’s AI assistant to navigate to a user’s Perplexity account, extract the associated email address, and navigate to a Gmail account. The AI agent was essentially acting as an actual user, meaning that traditional security methods weren’t working.

Brave warns that this type of prompt injection can go further, accessing bank accounts, corporate systems, private emails and other services.

Brave’s senior mobile security engineer, Artem Chaikin, and VP of privacy and security, Shivan Kaul Sahib, laid out a list of possible fixes. First, AI web browsers should always treat page content as untrusted. AI models should check to make sure they’re following user intent. The model should always double-check with the user to ensure interactions are correct, and agentic browsing mode should only turn on when the user wants it to.

Brave’s blog post is the first in a series regarding challenges facing AI web browsers. Brave also has an AI assistant, Leo, embedded in its browser.

AI is increasingly embedded in all parts of technology, from Google searches to toothbrushes. While having an AI assistant is handy, these new technologies have different security vulnerabilities.

In the past, hackers needed to be expert coders to break into systems. When dealing with AI, however, it’s possible to use squirrely natural language to get past built-in protections.

Also, since many companies rely on major AI models, such as ones from OpenAI, Google and Meta, any vulnerabilities in those systems could extend to companies using those same models. AI companies haven’t been open about these types of security vulnerabilities as doing so might tip off hackers, giving them new avenues to exploit.

Technologies

Episode 3 of the VERUM AI Mini-Series Is Now Available

Verum Messenger has released the third episode of its AI mini-series, SHADOWS, created using Verum AI.

The new episode, titled «Ghost Money,» continues the story of the conflict between a team of heroes and the Omega corporation, which seeks to take control of digital communications. This time, the focus shifts to anonymous payments and financial freedom, revealing how privacy can extend beyond messaging.

Like the previous episodes, the new release not only advances the storyline but also showcases the capabilities of the Verum ecosystem, highlighting technologies designed for secure communication and digital privacy.

The mini-series consists of seven episodes, released gradually across Verum Messenger’s social media channels.

Episode 3 is now available. Stay tuned for the next chapter.

Watch on Instagram
Watch on YouTube

Technologies

Verum Finance Now Available for Mac, Expanding the Verum Ecosystem on Desktop

Verum has officially released Verum Finance for macOS, bringing its financial platform to the Mac and expanding access to the Verum ecosystem across Apple’s devices. The launch allows users to manage their finances from desktop while enjoying the same secure and seamless experience available on iPhone and iPad.

The new Mac version includes the full range of Verum Finance features, including balance management, instant transfers to other Verum users, debit card management, Apple Pay support, asset exchange, and transaction history — all optimized for the macOS experience.

Verum Finance can be used as a standalone application or alongside Verum Messenger. Users who sign in with their Verum Messenger account automatically synchronize their balances, settings, and account data across devices, ensuring a consistent experience throughout the Verum ecosystem.

The macOS release further strengthens Verum’s vision of creating an integrated digital platform where communication and financial services work together. Verum Messenger, which is also available for Mac, complements the ecosystem with encrypted messaging, voice and video calls, VPN, eSIM, anonymous email, AI-powered tools, offline communication capabilities, and cryptocurrency features.

With both Verum Messenger and Verum Finance now available across iPhone, iPad, and Mac, users can access secure communication and financial services wherever they work.

Verum Finance for Mac is available now through the Mac App Store.

Verum Finance for macOS: https://apps.apple.com/us/app/verum-finance/id6774245148
Verum Finance: https://finance.verum.im
Verum Messenger: https://verum.im

Technologies

Why Travelers Are Switching to Verum E-SIM This Summer

Summer Travel, Freedom, and Seamless Connectivity: Why Verum E-SIM Is Becoming the New Standard for Travelers

Summer is the peak season for vacations, long-distance trips, and new experiences. Millions of people travel abroad, explore new countries, plan adventures, and try to stay connected with family, work, and social media. And in the middle of all this comes a familiar question: how do you stay online without expensive roaming or the hassle of buying local SIM cards?

The answer is already here — eSIM.

Why eSIM Is So Convenient

eSIM (embedded SIM) is a built-in digital SIM card that lets you activate mobile internet without a physical card. All you need is an app — choose a plan and connect in just a couple of minutes.

No more:

* searching for local SIM cards at airports
* paying expensive roaming fees
* swapping physical SIMs every time you travel

Now your internet travels with you.

Internet in 150+ Countries

Modern eSIM solutions provide coverage in 150+ countries worldwide, helping tourists, freelancers, and business travelers stay connected almost anywhere on the planet.

Among the services offering these capabilities:

Verum E-SIM — https://esim.verum.im
World E-SIM — https://worldesim.me
USA E-SIM — https://usa.esim.verum.im
Euro E-SIM — https://euro.esim.verum.im
Canada E-SIM — https://canada.esim.verum.im
Balkan E-SIM — https://balkan.esim.verum.im
Ukraine E-SIM — https://ukraine.esim.verum.im
London E-SIM — https://london.esim.verum.im
E-SIM Africa — https://africa.esim.verum.im