When your AI browser becomes your enemy: the Comet security disaster
Comet can't distinguish user commands from malicious instructions hidden in websites, treating poisoned blog posts and social media content as legitimate orders while operating with full access to emails and authenticated sessions.