SquareX — Cyber Attacks, Breaches & Threat Activity

Related Threat Clusters

• MCP API in Comet Browser Enables Full Device Control via Extensions

  SquareX has revealed a hidden MCP API in the Comet AI browser that allows extensions to execute arbitrary commands on users' devices. This API bypasses security measures found in traditional browsers, posing risks to…

  8 articles · Updated November 19, 2025
• SquareX and Perplexity Dispute Over Comet Browser Vulnerability

  SquareX claims to have identified a method to exploit a hidden Comet API for executing local commands. Perplexity disputes this assertion, labeling the research as fake. The disagreement highlights ongoing tensions in…

  2 articles · Updated November 21, 2025
• SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability

  SquareX claims to have discovered a vulnerability in the Comet browser that allows for the abuse of a hidden API to execute local commands. Perplexity disputes this claim, labeling the research as fake. The disagreement…

  2 articles · Updated November 21, 2025
• Comet AI Browser API Allows Unauthorized Device Control

  SquareX researchers have identified a hidden MCP API in the Comet AI browser that enables embedded extensions to execute local commands and potentially take full control of users' devices. This API circumvents…

  6 articles · Updated November 21, 2025

Recent Intelligence Reports

• SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability — Securityweek · November 21, 2025
• Comet Browser Flaw Lets Hidden API Run Commands on Users’ Devices — Hackread · November 20, 2025
• Hidden API in Comet AI browser exposes users to device takeovers — Securitybrief.Asia · November 19, 2025
• Hidden API in Comet AI browser raises security red flags for enterprises — Csoonline · November 19, 2025

Related Entities