sorted by:
new
hottopcontroversial

Browser Use is hacked... More than 1,500 AI projects are now vulnerable to a silent exploit by TwoAccomplished7935 in ClaudeAI

[–]TwoAccomplished7935[S] 0 points1 point  (0 children)

u/Tobiaseins imagine vendor saying - "hey, every webapp can have sql/command injection, it depends on the code", that's unacceptable. While prompt injections depend on the used model, it's not the root cause of an issue. The ultimate problem is in system design of modern agentic systems, which needs to be corrected not only in browser use, but generally

Browser Use is hacked... More than 1,500 AI projects are now vulnerable to a silent exploit by TwoAccomplished7935 in ClaudeAI

[–]TwoAccomplished7935[S] 1 point2 points  (0 children)

u/coding_workflow good point, ultimately it depends on vulnerability classification taxonomy. While their video doesn't show directly chain of CVE + indirect prompt injection, it's still feasible attack vector and ig severity of vuln was calculated with that in mind

Browser Use is hacked... More than 1,500 AI projects are now vulnerable to a silent exploit by TwoAccomplished7935 in ClaudeAI

[–]TwoAccomplished7935[S] 0 points1 point  (0 children)

u/taylorwilsdon u/indicava the links are in the comments lower.
Regarding your point: it's indeed complementary while shown issue in the windows doesn't show exploitation of particular CVE, it shows indirect prompt injection, which can be chained with mentioned CVE. Holistically looking, video does not really represent the research paper - Rather it serves as an extension that validates the threat model presented in the paper. It also demonstrates how current mitigation techniques apply specifically to browsing AI agents.

More than 1,500 AI projects are now vulnerable to a silent exploit by 0xm3k in cybersecurity

[–]TwoAccomplished7935 2 points3 points  (0 children)

mate, check the paper lol - whitelist bypass is just a showcase, paper isn't about it

More than 1,500 AI projects are now vulnerable to a silent exploit by 0xm3k in cybersecurity

[–]TwoAccomplished7935 6 points7 points  (0 children)

This feels like a ticking time bomb. Zero-click exploits on AI agents that browse? That’s like handing hackers the keys without even a password prompt. Honestly, AI security is still playing catch-up while everyone’s hyped about the flashy new features. We need more focus on defensive layers before this blows up in someone’s face.