Back Cybersecuritynews

Perplexity’s Comet Browser Hijacked Using Calendar Invite to Exfiltrate Sensitive Data

Cybersecuritynews •Abinaya • March 4, 2026

A poisoned Google Calendar invite is all it takes to weaponize Perplexity’s Comet browser. Security researchers at Zenity Labs have discovered a critical vulnerability, dubbed PerplexedBrowser, that tricks Comet’s AI agent into reading local files and stealing credentials. This zero-click attack requires only that the user ask the agent to handle a routine meeting invite, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zenity Labs Reveals PleaseFix Vulnerabilities in Perplexity Comet and Other Browsers Zenity Labs disclosed a family of critical vulnerabilities known as PleaseFix, affecting agentic browsers including Perplexity Comet. These vulnerabilities enable zero-click agent hijacking, local file exfiltration, and credential theft within workflows authorized by agents such as 1Password. 18 sources 40

Extracted Entities

Perplexity’s Comet Browser Hijacked Using Calendar Invite to Exfiltrate Sensitive Data

The full story

Extracted Entities

Attack Types (1)

Platforms (2)

Vulnerabilities (1)