Zenity Labs demonstrated at Black Hat USA 2026 that Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas and Copilot Edge can all be turned against their own users by ordinary content. An email, a calendar invite or a link under a social post is enough, and the victim never clicks anything. Here is what the attacks did and how to lock your agent down.
English
Español
Français
Italiano
Nederlands
Polski
Português
Русский
Türkçe
Svenska
Chinese
Magyar