Brave just exposed a critical indirect prompt injection flaw in Perplexity's Comet browser assistant. Simply clicking "summarize" on a poisoned webpage lets hidden text trick the AI into reading private Gmail auth codes from another tab and taking over accounts. Why it matters: Agentic browsers completely bypass traditional web security boundaries, and reliable fixes are still nowhere in sight.
Brave just upgraded its built-in browser assistant Leo, making Mistral's open-source Mixtral 8x7B the default model for all users. The upgrade brings sharper coding, larger context handling, and fewer hallucinations, all while maintaining Brave's strict privacy setup that discards chats immediately without requiring a login. Free users get access with rate limits, while Premium subscribers get higher usage caps.
Brave just rolled out Leo, a native AI assistant for its desktop browser that puts user privacy front and center. Powered by Meta's Llama 2, the free tool can summarize webpages, answer questions, and translate text without requiring a login or saving chats for model training. Brave is also offering a $15 monthly tier to tap Anthropic's Claude Instant, with mobile apps coming soon.
