CometJacking: Prompt Injection Attack Turns Perplexity’s Comet AI Browser Into a Data Exfiltration Vector

Researchers disclosed 'CometJacking,' a prompt injection attack targeting Perplexity's Comet AI browser that uses a malicious URL to hijack the AI assistant and exfiltrate sensitive data such as emails and calendar entries. The attack bypasses existing data protections using simple Base64 encoding and leverages the browser's authorized access to connected services, highlighting new security risks in AI-native browsers.

• thehackernews.com/2025/10/cometjacking-one-click-can-turn.html (opens in a new tab)

• Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress ExploitationCampaign2026-09-22
• Akira Ransomware Attack InvestigationMalware2026-10-07
• TASK#STOMP PowerShell Backdoor Steals Business Documents and Maintains Persistent Remote AccessMalware2026-09-24
• PAYLOAD ransomware attacks through Active Directory GPOMalware2026-09-21
• Active Cloud Data Theft and Extortion Campaign Targeting Microsoft 365 and SaaS PlatformsCampaign2026-09-10