OpenAI's Atlas and Perplexity's Comet browsers are vulnerable to attacks that spoof the built-in AI sidebar and can lead users into following malicious instructions. The AI Sidebar Spoofing attack was ...

The App utilizes the WKWebView APIs that allow the App to inject JavaScript into web content without also leveraging platform APIs to sandbox the JavaScript from untrusted code. Starting with iOS 14, ...