Shadow AI in the Browser: The Next Enterprise Blind Spot

Summary: Employees are adopting personal AI tools, AI-powered browser extensions, and agentic browsers like ChatGPT Atlas that run inside the browser runtime, where CASBs, SWGs, EDRs, and DLP tools have no visibility. The article describes how these agents run with the user's own privileges, can be steered by hidden prompts embedded in web pages, and can move data across applications without triggering a browser policy violation.
Why it matters: A demonstrated attack on Perplexity's Comet browser used a hidden prompt in a Reddit comment to make the assistant disclose private information and act across other sites, with no browser vulnerability exploited. The agent carries the user's authority, so every action looks legitimate to the controls you already have.

Read the original at The Hacker News ↗