brave · TEXXR

/

Navigation

C

Chronicles

Browse all articles

C

E

Explore

Semantic exploration

E

R

Research

Entity momentum

R

N

Nexus

Correlations & relationships

N

~

Story Arc

Topic evolution

S

↻

Drift Map

Semantic trajectory animation

D

P

Posts

Analysis & commentary

P

Browse

@

Entities

Companies, people, products, technologies

◇

Domains

Browse by publication source

☉

Handles

Browse by social media handle

Detection

?

Concept Search

Semantic similarity search

!

High Impact Stories

Top coverage by position

+

Sentiment Analysis

Positive/negative coverage

*

Anomaly Detection

Unusual coverage patterns

Analysis

vs

Rivalry Report

Compare two entities head-to-head

/\

Semantic Pivots

Narrative discontinuities

!!

Crisis Response

Event recovery patterns

Connected

Nav: C E R N

Search: /

Command: ⌘K

Embeddings: large

2025-10-22

Indirect prompt injection attacks occur when malicious instructions are hidden in web content like webpages. When an LLM analyzes the content, it obeys the hidden instructions because it believes they're real commands from the user.

2025-10-22 View on X

Brave

Researchers detail systemic vulnerabilities in AI agentic browsers, including Perplexity's Comet and Fellou, related to indirect prompt injection attacks

Building on our previous disclosure of the Perplexity Comet vulnerability, we've continued our security research across the agentic browser landscape.

View original

The security vulnerability we found in Perplexity's Comet browser this summer is not an isolated issue. Indirect prompt injections are a systemic problem facing Comet and other AI-powered browsers. Today we're publishing details on more security vulnerabilities we uncovered.

2025-10-22 View on X

OpenAI

OpenAI says ChatGPT Atlas' opt-in browser memories feature can remember key details from users' web browsing to improve chat responses and offer suggestions

The browser with ChatGPT built in. — Today we're introducing ChatGPT Atlas, a new web browser built with ChatGPT at its core.

View original

The security vulnerability we found in Perplexity's Comet browser this summer is not an isolated issue. Indirect prompt injections are a systemic problem facing Comet and other AI-powered browsers. Today we're publishing details on more security vulnerabilities we uncovered.

2025-10-22 View on X

Simon Willison's Weblog

First impressions of ChatGPT Atlas, as browser agents remain confusing, with insurmountable security and privacy risks including prompt injection attacks

a web browser with ChatGPT built in, not bolted on. The browser is the agent now. Tabs are prompts. The search bar is dead. Welcome to the post-URL era. P.S the browser wrote this ...

View original

2025-08-25

In today's blog post, we share more details on this vulnerability and discuss potential protections against other attacks of this nature. Perplexity has patched this error since we reported it to them. https://brave.com/...

2025-08-25 View on X

Brave

Researchers detail a now-fixed flaw in Perplexity's Comet AI browser that let an attacker use an indirect prompt injection to manipulate it into taking actions

Brave and Guardio's security audits call out paid AI browser Victor Tangermann / Futurism : Using an AI Browser Lets Hackers Drain Your Bank Account Just by Showing You a Public Re...

View original

This security flaw stems from how Comet summarizes websites for users. When processing a site's content, Comet can't tell content on the website apart from legitimate instructions by the user. This means that the browser will follow commands hidden on the site by an attacker.

2025-08-25 View on X

Brave

Researchers detail a now-fixed flaw in Perplexity's Comet AI browser that let an attacker use an indirect prompt injection to manipulate it into taking actions

Brave and Guardio's security audits call out paid AI browser Victor Tangermann / Futurism : Using an AI Browser Lets Hackers Drain Your Bank Account Just by Showing You a Public Re...

View original

These malicious instructions could be white text on a white background or HTML comments. Or they could be a social media post. If Comet sees the commands while summarizing, it will follow them even if they could hurt the user. This is an example of an indirect prompt injection.

2025-08-25 View on X

Brave

Researchers detail a now-fixed flaw in Perplexity's Comet AI browser that let an attacker use an indirect prompt injection to manipulate it into taking actions

Brave and Guardio's security audits call out paid AI browser Victor Tangermann / Futurism : Using an AI Browser Lets Hackers Drain Your Bank Account Just by Showing You a Public Re...

View original

This attack demonstrates the risks presented by AI agents operating with full user authentication across multiple sites. New security measures are needed to make agentic browsing safe.

2025-08-25 View on X

Brave

Researchers detail a now-fixed flaw in Perplexity's Comet AI browser that let an attacker use an indirect prompt injection to manipulate it into taking actions

Brave and Guardio's security audits call out paid AI browser Victor Tangermann / Futurism : Using an AI Browser Lets Hackers Drain Your Bank Account Just by Showing You a Public Re...

View original

AI agents that can browse the Web and perform tasks on your behalf have incredible potential but also introduce new security risks. We recently found, and disclosed, a concerning flaw in Perplexity's Comet browser that put users' accounts and other sensitive info in danger. [image]

2025-08-25 View on X

Brave

Researchers detail a now-fixed flaw in Perplexity's Comet AI browser that let an attacker use an indirect prompt injection to manipulate it into taking actions

Brave and Guardio's security audits call out paid AI browser Victor Tangermann / Futurism : Using an AI Browser Lets Hackers Drain Your Bank Account Just by Showing You a Public Re...

View original

One example attack: 1. A Comet user sees a Reddit thread where one comment has hidden instructions. 2. The user asks Comet to summarize the thread. 3. Comet follows the malicious instructions to find the user's Perplexity login details and send them to the attacker. [video]

2025-08-25 View on X

Brave

Researchers detail a now-fixed flaw in Perplexity's Comet AI browser that let an attacker use an indirect prompt injection to manipulate it into taking actions

Brave and Guardio's security audits call out paid AI browser Victor Tangermann / Futurism : Using an AI Browser Lets Hackers Drain Your Bank Account Just by Showing You a Public Re...

View original

2025-05-15

We encourage any developers disrupted by the retiring of Bing's API to test the Brave Search API. Our API is more than capable to fill the gap left as Microsoft closes the door for its customers. Get started with our API here: https://brave.com/...

2025-05-15 View on X

Wired

Microsoft plans to shut down its Bing Search APIs on August 11; a source says the largest customers will retain access, and DuckDuckGo says it won't be affected

Microsoft is limiting access to tools that boosted its rivals, but larger customers like DuckDuckGo say they won't be affected.

View original

Microsoft will be abruptly shutting down access to the Bing Search APIs that many developers rely on for their apps. It's pushing these developers to switch to a new AI-powered tool with narrower uses. Full story at Wired: https://www.wired.com/...

2025-05-15 View on X

Wired

Microsoft plans to shut down its Bing Search APIs on August 11; a source says the largest customers will retain access, and DuckDuckGo says it won't be affected

Microsoft is limiting access to tools that boosted its rivals, but larger customers like DuckDuckGo say they won't be affected.

View original

2024-05-24

Why did DuckDuckGo, Microsoft Copilot, ChatGPT's web search, Ecosia, and Qwant all stop working this morning? Because of an issue with Bing's API, which all of these services depend on. These outages highlight the need for truly independent search engines like Brave Search. [image]

2024-05-24 View on X

BleepingComputer

Users reported a massive Microsoft outage that impacted Bing, Copilot on the web and mobile, Copilot in Windows, ChatGPT's internet search, DuckDuckGo, and more

View original

2024-03-13

Why did Apple and Google make it hard to switch default browsers for so many years? Because it's a powerful way to block competitors. Just look at what happened to Brave installs on iPhone in the EU when Apple rolled out a new default browser choice screen on March 6th: [image]

2024-03-13 View on X

BleepingComputer

Brave says that daily Brave iOS app installs jumped from ~8K to over 11K after Apple added a default browser choice screen in the EU to comply with the DMA

Brave has seen a sharp increase in users installing its privacy-focused Brave Browser on iPhones after Apple introduced changes …

View original

It's time to give users an easy choice of browsers, Google. If you really care about users, you'll allow free and open competition so they can find the browser that suits their individual needs.

2024-03-13 View on X

BleepingComputer

Brave says that daily Brave iOS app installs jumped from ~8K to over 11K after Apple added a default browser choice screen in the EU to comply with the DMA

Brave has seen a sharp increase in users installing its privacy-focused Brave Browser on iPhones after Apple introduced changes …

View original

2023-11-03

Brave's AI browser assistant Leo is being rolled out over the next few days to all desktop users! Let's talk about what you can expect from this powerful, privacy-preserving tool... [video]

2023-11-03 View on X

TechCrunch

Brave releases its AI assistant Leo to all desktop users and unveils Leo Premium, offering access to faster and better LLMs and higher rate limits for $15/month

Brave's AI browser assistant that preserves users' privacy—is now available to desktop users Jess Weatherbed / The Verge : Brave responds to Bing and ChatGPT with a new ‘anonymous ...

View original

Your chats with Leo are private, anonymous, and secure. Leo doesn't record chats, or use them for model training, and no account or login is required to use Leo. Learn more about how the feature protects your privacy here: https://brave.com/...

2023-11-03 View on X

TechCrunch

Brave releases its AI assistant Leo to all desktop users and unveils Leo Premium, offering access to faster and better LLMs and higher rate limits for $15/month

Brave's AI browser assistant that preserves users' privacy—is now available to desktop users Jess Weatherbed / The Verge : Brave responds to Bing and ChatGPT with a new ‘anonymous ...

View original

Brave Leo is free by default. Leo Premium subscribers can use additional large language models, such as Claude Instant from @AnthropicAI, for higher quality conversations. Premium benefits also include higher rate limits, priority queuing, and early access to new features.

2023-11-03 View on X

TechCrunch

Brave releases its AI assistant Leo to all desktop users and unveils Leo Premium, offering access to faster and better LLMs and higher rate limits for $15/month

Brave's AI browser assistant that preserves users' privacy—is now available to desktop users Jess Weatherbed / The Verge : Brave responds to Bing and ChatGPT with a new ‘anonymous ...

View original

2023-09-06

Don't want Chrome to use your browsing history for targeted ads? You can disable this feature at chrome://settings/adPrivacy. But that only solves one privacy issue with Chrome. The better solution: switch to Brave, which blocks a broad range of ads and trackers by default.

2023-09-06 View on X

The Register

Google has been rolling out Chrome's “Enhanced Ad Privacy” via a popup, part of its Topics API; some say the “Got It” button is misleading as tracking is active

YMMV, based on where you are — Google has been gradually rolling out Chrome's “Enhanced Ad Privacy.”

View original

2023-08-05

Today Brave Search is releasing its own image and video search! Now any Brave Search query can be served directly from Brave's own index, enabling users to benefit from a fully independent search engine that protects their privacy and is censorship-resistant. [image]

2023-08-05 View on X

The Verge

Brave Search updates its image and video search to use Brave's own index rather than Bing's or Google's; some advanced search capabilities are still absent

but this comes at a significant cost to user privacy. We're happy to provide a 100% private and anonymous way for users to find visual content. https://brave.com/... Forums: Leo To...

View original

Increasingly, users are using their favorite social and content platforms to discover images and videos—but this comes at a significant cost to user privacy. We're happy to provide a 100% private and anonymous way for users to find visual content. https://brave.com/...

2023-08-05 View on X

The Verge

Brave Search updates its image and video search to use Brave's own index rather than Bing's or Google's; some advanced search capabilities are still absent

but this comes at a significant cost to user privacy. We're happy to provide a 100% private and anonymous way for users to find visual content. https://brave.com/... Forums: Leo To...

View original