[Stanley]

Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails

A new agentic browser attack targeting Perplexity's Comet browser that's capable of turning a seemingly innocuous email into a destructive action that wipes a user's entire Google Drive contents, findings from Straiker STAR Labs show.
The zero-click Google Drive Wiper technique hinges on connecting the browser to services like Gmail and Google Drive to automate routine tasks by granting them

https://thehackernews.com/2025/12/zero-c...k-can.html

[Aeowulf]

Oof. That would infuriate me.

[DramaKing]

Guess this is another reason to restrict what an LLM can do. Good thing that Comet doesn't perform actions on its own.