Reading up on Comet
6 deep · digging since dec 03, 25
- AI Agent Goal Hijack: How Attackers Turn an Agent's Own Tools Against It
AI agent goal hijack lets attackers inject malicious instructions via retrieved content, turning agents’ own tools against them, as shown by real exploits like the Grok Bankr wallet drain.
- {{IW4QaZoc2}}
Perplexity open-sources Bumblebee, a read-only scanner that checks developer machines for risky packages, extensions, and AI tool configs during supply-chain incidents.
- {{IW4QaZoc2}}
Perplexity launches Personal Computer for Mac, enabling local AI agents that work across files, apps, and the web with continuous autonomous operation.
- Perplexity tests Messages integration and usage credits
Perplexity is developing a Mac Messages connector for its Comet browser and testing a usage-credits system for Pro users to buy extra capacity without upgrading.
- Perplexity Comet: A Reversing Story
The article provides a technical deep-dive into Perplexity's agentic browser Comet, detailing its dual-channel communication, hard boundaries, and page representation for AI interaction.
- BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents
Perplexity AI introduces BrowseSafe, a defense architecture, benchmark, and detection model for securing browser agents from prompt injection attacks.