Become a Member

Regulation TrackerLaws, orders and treaties read for their security duties and clocks Standards & FrameworksAttack taxonomies, control catalogues and frontier frameworks AI Incident DatabaseThe security incident record, with mechanism and lesson Research Paper LibraryThe papers that define the field, summarised OSS DirectoryRed teaming, guardrail, supply chain and evaluation tools Case StudiesProgrammes built, with measured outcomes AI Vulnerability TrackerCVEs and advisories for the components AI systems are built from

Latest in the tracker

New York Stop Addictive Feeds Exploitation (SAFE) for Kids Act and implementing rulesNew York's law restricting algorithmic feeds for minors takes effect on 25 January 2027 under final rules published in July 2026, with certified age assurance and $5,000-per-violation penalties.

Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Become a Member

Home/News/March 2026

Zenity discloses zero-click calendar-invite prompt injection against Perplexity's Comet browser

A routine-looking invitation carried instructions the browser's agent followed while processing the calendar, reading local files and exfiltrating data without any click, part of a family of agentic browser flaws the researchers call PleaseFix.

Vulnerabilities and exploitsUnited States10 Mar 2026

Found in October 2025 and published after remediation, the case extends the August 2025 findings against Comet and other AI browsers from visited pages to delivered content. Agentic browsers hold the lethal trifecta by design: untrusted content, authenticated sessions and outbound access.

What to do: isolate agentic browsing from logged-in sessions, require confirmation for file and data operations, and treat calendar, email and document content as untrusted input to any agent that reads it.