Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes
2026-03-11T19:24:14Z•5740e6967d67be555d6bbeabe17e592933fa711e5222753cdb3e8323745b4f0f
FortiGateNGFWUNC4899','APT28','Transparent-TribeUNC6426agentic-browsersai-securitybotnetchrome-extension-malwarecisa-kevcredential-theftexpression-sandbox-escapegoogle-looker-studiokadnapleakylookermalicious-packagesmicrosoft-patch-tuesdayn8nnpmperplexity-cometphishingremote-code-executionrust-cratessapsecret-exfiltrationsupply-chain
What happened
A large set of security reports and incidents affecting diverse targets was published: researchers demonstrated phishing-style attacks against agentic AI browsers (Perplexity's Comet), multiple critical RCE and credential-exposure vulnerabilities in the n8n workflow platform (now patched), and critical SAP and other enterprise flaws requiring urgent updates. Microsoft released a large March Patch Tuesday with multiple critical fixes including two publicly known zero-days; CISA added several widely exploited issues (e.g., CVE-2021-22054) to its KEV list. Active threats and supply-chain abuse: a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 5740e6967d67be555d6bbeabe17e592933fa711e5222753cdb3e8323745b4f0f
- Enrichment time
- 2026-03-11T19:24:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.