Researchers Disclose PerplexedBrowser Zero-Click Flaw in Perplexity's Comet AI Browser

Perplexity’s Comet is an AI browser capable of navigating and interacting with websites on a user’s behalf. Cybersecurity firm Guardio said Comet’s “Agentic Blabbering” behavior reveals excessive information about its reasoning and decisions, potentially allowing attackers to reverse-engineer its security logic and creating a new type of phishing risk.

In its latest research, Guardio used reasoning clues leaked by Comet and a generative adversarial network, or GAN, to continually refine phishing pages. The researchers successfully weakened the browser’s defenses and induced it to access a malicious website. Available information does not provide the study’s publication date, number of victims or financial losses. The central finding is that disclosed AI reasoning can be used to train fraudulent models to circumvent security controls.