ChatGPT Atlas is an AI-powered web browser that can book travel, order groceries or do research, all on your behalf. OpenAI says it's like having a personal agent built into your web browser. That's what has security experts concerned.

As remarkable as AI systems are, they're also imperfect. From hallucinations to sycophancy , AI can get things wrong, often. Handing the keys of a web browser to AI introduces a host of other potential issues, including prompt injection attacks, clipboard attacks and the simple inability to understand that some sites are spam.

"Atlas shows the same early-stage issues we have seen across other agent-style browsers," said Rob T. Lee, chief of research and chief AI officer at SANS Institute, a cooperative cybersecurity training and education organizati

See Full Page