Feeds.Feedburner MCP API in Comet Browser Enables Full Device Control via Extensions
Article Content
Browse articles 
SquareX has revealed a hidden MCP API in the Comet AI browser that allows extensions to execute arbitrary commands on users' devices. This API bypasses security measures found in traditional browsers, posing risks to user data and device integrity. The discovery raises significant security concerns for users of AI-powered browsers.
Ask AI about this cluster
Answers cite the sources they use
Updated 242d ago How this analysis works
More articles in this cluster (8)
Following this threat?
Track WannaCry, Comet and Perplexity in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Cyber Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, suffered a massive cyberattack attributed to North Korean hackers known as TraderTraitor, resulting in the theft of approximately $6.3 billion in digital assets. The attackers exploited vulnerabilities in Binance's hot wallet system, allowing… 
North Korea's Elite Hackers Behind $6.3 Billion Binance Heist North Korean hackers, linked to the group TraderTraitor, executed a record $6.3 billion cyber heist against Binance, the world's largest cryptocurrency exchange. The FBI and blockchain firms attribute the attack to state-sponsored hackers, while North Korea denies involvement. The operation reportedly involved…