![\"Chrome](\"https:\/\/www.newsbeep.com\/uk\/wp-content\/uploads\/2025\/10\/1760155099_283_960x0.jpg\")
<\/p>\n<\/p>\n
Should you quit Chrome now?<\/p>\n
SOPA Images\/LightRocket via Getty Images<\/p>\n
The question is not if \u2014 it\u2019s when. We will all use an AI browser soon. But which one and how soon. Meanwhile, Chrome dominates on both PCs and mobiles and no pureplay AI browser is noisier than Comet. So for now this is one versus the other.<\/p>\n
As with everything else AI related, the critical decision factor is security and privacy. Your web browser is your window on the world \u2014 and it\u2019s not one way. It\u2019s the most serious weak spot on your phone or PC. You look out as attackers look in.<\/p>\n
In a stark new report today, SquareX<\/a> says it has \u201cexposed major vulnerabilities<\/a> that could allow attackers to exploit AI Browsers to exfiltrate sensitive data, distribute malware and gain unauthorized access to enterprise SaaS apps.\u201d<\/p>\n ForbesWindows Warning: Your Wallpaper Could Let Hackers Control Your PCBy Zak Doffman<\/a><\/p>\n Perplexity<\/a> is firmly in SquareX\u2019s crosshairs. In its testing, SquareX says, \u201cComet fell prey to an OAuth attack, providing attackers with full access to the victim\u2019s email and Google Drive. This allowed attackers to exfiltrate every file stored on the victim\u2019s account, including those shared by colleagues and customers.\u201d<\/p>\n That\u2019s not all. In a separate attack, \u201cthe AI browser was completing tasks in the user\u2019s inbox \u2014 a common use case advertised by Comet itself \u2014 when it ended up distributing a malicious link to the victim\u2019s colleague through a calendar invite.\u201d<\/p>\n This research follows a similar warning from LayerX<\/a>, which says \u201ca single weaponized URL, without any malicious page content, is enough to let an attacker steal any sensitive data that has been exposed in the Comet browser.\u201d<\/p>\n According to LayerX, \u201can attacker only needs to get a user to open a crafted link, which can be sent via email, an extension, or a malicious site, and sensitive Comet data can be exposed, extracted, and exfiltrated.\u201d<\/p>\n In reality, all the AI browsers need to catch up and harden their defenses. This is new and very thin ice, and we are only just beginning to understand the attack vectors.<\/a><\/p>\n \u201cDespite claims of being more secure,\u201d SquareX CEO Vivek Ramachandran told me, \u201cautonomous agents with full user privileges can now operate without human oversight, lacking the security awareness and common sense of even a minimally trained user.\u201d<\/p>\n Change is coming and it\u2019s coming fast. Venn CEO David Matalon says \u201cwe\u2019re seeing an interesting shift in browser usage among our customers\u2019 remote employees and contractors. The use of novel, non-traditional browsers (not Chrome, Edge, or Safari) is up 14% year over year, driven largely by the promise of AI-powered productivity.\u201d<\/p>\n While Menlo Security\u2019s Pejman Roshan warns browsers are the primary application we use “for almost everything. So should one switch from the leading browser to the new and exciting AI browsers? It depends on what matters most to you.”<\/p>\n And that drives timing. You will switch but you do need to decide whether the time is now. And if you do, beware the raft of warnings around AI browsers and agents.<\/a><\/p>\n