Brave just exposed a critical indirect prompt injection flaw in Perplexity's Comet browser assistant. Simply clicking "summarize" on a poisoned webpage lets hidden text trick the AI into reading private Gmail auth codes from another tab and taking over accounts. Why it matters: Agentic browsers completely bypass traditional web security boundaries, and reliable fixes are still nowhere in sight.
Brave just disabled Microsoft's Windows Recall across all browser tabs by default, preventing the AI search feature from capturing users' browsing history. Brave uses Microsoft's private input API to block screenshots, and the protection is already live in Nightly builds ahead of a stable rollout.
Brave just added a chat bar to its Answer with AI summaries, letting users ask follow-up questions directly beneath search results. The feature combines open and proprietary LLMs to provide cited contextual answers without logging user data. Why it matters: It bridges the gap between classic search links and conversational chatbots where Google still lags.
Brave just upgraded its built-in browser assistant Leo, making Mistral's open-source Mixtral 8x7B the default model for all users. The upgrade brings sharper coding, larger context handling, and fewer hallucinations, all while maintaining Brave's strict privacy setup that discards chats immediately without requiring a login. Free users get access with rate limits, while Premium subscribers get higher usage caps.
Brave just rolled out Leo, a native AI assistant for its desktop browser that puts user privacy front and center. Powered by Meta's Llama 2, the free tool can summarize webpages, answer questions, and translate text without requiring a login or saving chats for model training. Brave is also offering a $15 monthly tier to tap Anthropic's Claude Instant, with mobile apps coming soon.
