PleaseFix: Zenity Demonstrates Zero-Click Takeover of Every Major Agentic Browser
Zenity Labs disclosed a new vulnerability class at Black Hat on August 5 that it calls Intent Collision, a zero-click attack vector that hijacks agentic browsers by injecting hidden instructions into any web page the agent visits. The demonstration compromised Claude in Chrome, Gemini, Perplexity Comet, ChatGPT Atlas, and Copilot Edge without requiring the user…