A zero-click browser attack uses polite email instructions to trigger agents that delete real files from Google Drive.

Researchers discovered that adding instructions for AI-powered browser assistants after the hash (#) symbol inside URLs can influence their behavior to leak sensitive data and direct users to phishing ...

A new report out today from Cato Networks Ltd.’s Cato CTRL threat research team details a newly discovered indirect prompt injection technique that can manipulate artificial intelligence browser ...

Researchers disclosed a HashJack attack that manipulates AI browsers. Cato CTRL examined Comet, Copilot for Edge, and Gemini for Chrome. Could lead to data theft, phishing, and malware downloads.

Many AI browsers are facing scrutiny after researchers detailed how a simple fragment in a URL can be used to influence browser assistants. New research from Cato Networks found the "HashJack" ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. Now security researchers from the Cato CTRL Threat Research ...

Gilbert-based Drive Health has raised more than $26 million total and is planning another major funding round next year as it ...

Security researchers have discovered a new indirect prompt injection vulnerability that tricks AI browsers into performing malicious actions. Cato Networks claimed that “HashJack” is the first ...

Experts warn that by 2026, these autonomous systems could become the primary vector for corporate security breaches, ...

Cato Networks says it has discovered a new attack, dubbed "HashJack," that hides malicious prompts after the "#" in legitimate URLs, tricking AI browser assistants ...