Watch out - AI browsers have critical blind spots and can leak data

As AI-powered browsers like Perplexity’s Comet and Fellou gain popularity, cybersecurity experts have cautioned that these browsers are a weak link in security. AI assistants can be manipulated by hidden ‘prompt injections’ and tricked into leaking data or performing unintended actions.

Kunal Ruvala, Senior VP and GM for India, Palo Alto Networks, said that the browser is where nearly every piece of work happens — from SaaS dashboards to GenAI assistants, but it’s unfortunately also where visibility breaks down. “These aren’t isolated incidents; they reveal systemic weaknesses that could be exploited more broadly as AI browsing becomes mainstream,” he said.

Hidden directives

Dhiraj Udapure, CTO, SCS Tech, explains that prompt injections trick the AI engine that powers the browser by emb