Latest
●MLflow autologging writes CrewAI API keys into trace data●AI agent finds four severe flaws in EPICS control software●Researchers say 44 AI agents drove attacks on Japanese targets●New 'Aokigahara' stealer goes after AI assistant sessions●Warp discloses breach exposing AI agent logs and telemetry●Strands Agents leaves agent session files open to local attackers●Broken escape function lets documents wipe GraphRAG databases●Three MCP servers let agents be tricked into running shell commands
Wednesday, 28 October 2026
1 agent hack today▼ 9 vs yesterday (10)
The Agentic TimesPowered byVortal

Incident database

Perplexity Comet browser agent hijacked by text on a web page

Brave's security team showed that instructions hidden in a Reddit post could make Perplexity's Comet browser agent open a user's banking or email session and leak one-time codes to the attacker.

Occurred 25 July 2025 · Disclosed 20 August 2025 · Record updated 1 October 2026

Impact

Full account takeover of any site the user was logged into. Brave said Perplexity's initial fix was incomplete and later confirmed mitigation.

Our coverage

Sources

  1. brave.comhttps://brave.com/blog/comet-prompt-injection/