Itbrief.Au Comet AI Browser API Allows Unauthorized Device Control
Article Content
Browse articles 
SquareX researchers have identified a hidden MCP API in the Comet AI browser that enables embedded extensions to execute local commands and potentially take full control of users' devices. This API circumvents traditional browser security measures, allowing unauthorized access to device resources without user consent.
Ask AI about this cluster
Answers cite the sources they use
Updated 242d ago How this analysis works
More articles in this cluster (6)
Following this threat?
Track WannaCry, Comet and Perplexity in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Cyber Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, suffered a massive cyberattack attributed to North Korean hackers known as TraderTraitor, resulting in the theft of approximately $6.3 billion in digital assets. The attackers exploited vulnerabilities in Binance's hot wallet system, allowing… 
North Korea's Elite Hackers Behind $6.3 Billion Binance Heist North Korean hackers, linked to the group TraderTraitor, executed a record $6.3 billion cyber heist against Binance, the world's largest cryptocurrency exchange. The FBI and blockchain firms attribute the attack to state-sponsored hackers, while North Korea denies involvement. The operation reportedly involved…