Back The-Decoder

A calendar invite is all it took to hijack Perplexity's Comet browser and steal 1Password credentials

The-Decoder • March 3, 2026

Topics. The attacks exploit how the browser works, not a traditional vulnerability; Fake buttons and Hebrew instructions help the attack slip past ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zenity Labs Reveals PleaseFix Vulnerabilities in Perplexity Comet and Other Browsers Zenity Labs disclosed a family of critical vulnerabilities known as PleaseFix, affecting agentic browsers including Perplexity Comet. These vulnerabilities enable zero-click agent hijacking, local file exfiltration, and credential theft within workflows authorized by agents such as 1Password. 18 sources 40

Extracted Entities

A calendar invite is all it took to hijack Perplexity's Comet browser and steal 1Password credentials

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)

MITRE ATT&CK (1)

Tools (1)