{“lastseen”:”2025-10-24T14:08:20″,”description”:”You\u2019ve probably noticed that artificial intelligence, or AI, has been everywhere lately\u2014news, phones, apps, even in your browser. It seems like everything suddenly wants to be \u201cpowered by AI.\u201c If it\u2019s not, it\u2019s considered old school and boring. It\u2019s easy to get swept up in the promise: smarter tools, less work, and maybe even a glimpse of the future.\\n\\nBut if we look at some of the things we learned just this week, that glimpse doesn’t only promise good things. There\u2019s a quieter story running alongside the hype that you won\u2019t see in the commercials. It\u2019s the story of how AI\u2019s rapid development is leaving security and privacy struggling to catch up.\\n\\nAnd if you make use of AI assistants, chatbots, or those \u201csmart\u201d AI browsers popping up on your screen, those stories are worth your attention.\\n\\n## Are they smarter than us?\\n\\nEven some of the industry’s biggest names\u2014Steve Wozniak, Sir Richard Branson, and Stuart Russel\u2014are worried that progress in AI is moving too fast for its own good. In an article published by ZDNet, they talk about their fear of \u201csuperintelligence,\u201d saying they\u2019re afraid we’ll cross the line from \u201cAI helps humans\u201d to \u201cAI acts beyond human control\u201d before we\u2019ve figured out how to keep it in check.\\n\\nThese scenarios are not about killer robots or takeovers like in the movies. They’re about much smaller, subtler problems that add up. For example, an AI system designed to make customer service more efficient might accidentally share private data because it wasn\u2019t trained to understand what\u2019s confidential. Or an AI tool designed to optimize web traffic might quietly break privacy laws it doesn\u2019t comprehend.\\n\\nAt the scale we use AI\u2014billions of interactions per day\u2014these oversights become serious. The problem isn\u2019t that AI is malicious; it\u2019s that it doesn\u2019t understand consequences, and developers forget to set boundaries.\\n\\nWe\u2019re already struggling to build basic online safety into the AI tools that are replacing our everyday ones.\\n\\n## AI browsers: too smart, too soon\\n\\nAI browsers\u2014and their newer cousin, the \u2018agentic\u2019 browser\u2014do more than just display websites. They can read them, summarize them, and even perform tasks for you.\\n\\nA browser that can search, write, and even act on your behalf sounds great\u2014but you may want to rethink that. According to research reported by Futurism, some of these tools are being rolled out with deeply worrying security flaws.\\n\\nHere’s the issue: many AI browsers are just as vulnerable to prompt injection as AI chatbots. The difference is that if you give an AI browser a task, it runs off on its own and you have little control over what it reads or where it goes. \\n\\nTake Comet, a browser developed by the company Perplexity. Researchers at Brave found that Comet\u2019s \u201cAI assistant\u201d could be tricked into doing harmful things simple because it trusted what it saw online. \\n\\nIn one test, researchers showed the browser a seemingly innocent image. Hidden inside that image was a line of invisible text\u2014something no human would see, but instructions meant only for the AI. The browser followed the hidden commands and ended up opening personal emails and visiting a malicious website.\\n\\nIn short, the AI couldn\u2019t tell the difference between a user\u2019s request and an attacker\u2019s disguised instructions. That is a typical example of a prompt injection attack, which works a bit like phishing for machines. Instead of tricking a person into clicking a bad link, it tricks an AI browser into doing it for you. Without the realization of \u201coops, maybe I shouldn\u2019t have done that,\u201d it is faster, quiet, and with access you might not even realize it has.\\n\\nThe AI has no idea it did something wrong. It\u2019s just following orders, doing exactly what it was programmed to do. It doesn\u2019t know which instructions are bad because nobody taught it how to tell the difference.\\n\\n## Misery loves company: spoofed AI interfaces\\n\\nEven if the AI engine itself worked perfectly, attackers have another way in: fake interfaces.\\n\\nAccording to BleepingComputer, scammers are already creating spoofed AI sidebars that look identical to genuine ones from browsers like OpenAI’s Atlas and Perplexity’s Comet. These fake sidebars mimic the real interface, making them almost impossible to spot. Picture this: you open your browser, see what looks like your trusted AI helper, and ask it a question. But instead of the AI assistant helping you, it\u2019s quietly recording every word you type.\\n\\nSome of these fake sidebars even persuade users to \u201cverify\u201d credentials or \u201cauthorize\u201d a quick fix. This is social engineering in a new disguise. The scammer doesn\u2019t need to lure you away from the page, they just need to convince you that the AI you\u2019re chatting with is legitimate. Once that trust is earned, the damage is done.\\n\\nAnd since AI tools are designed to sound helpful, polite, and confident, most people will take their word for it. After all, if an AI browser says, \u201cDon\u2019t worry, this is safe to click,\u201d who are you to argue?\\n\\n## What can we do?\\n\\nThe key problem right now is speed. We keep pushing the limits of what AI can do faster than we can make it safe. The next big problem will be the data these systems are trained on.\\n\\nAs long as we keep chasing the newest features, companies will keep pushing for more options and integrations\u2014whether or not they\u2019re ready. They\u2019ll teach your fridge to track your diet if they think you\u2019ll buy it.\\n\\nAs consumers, the best thing we can do is stay informed about new developments and the risks that come with them. Ask yourself: Do I really need this? What am I trusting it with? What\u2019s the potential downside? Sometimes it\u2019s worth doing things the slower, safer way.\\n\\nPro tip: I installed Malwarebytes’ Browser Guard on Comet, and it seems to be working fine so far. I’ll keep you posted on that.\\n\\n* * *\\n\\n**We don ‘t just report on threats – we help safeguard your entire digital identity**\\n\\nCybersecurity risks should never spread beyond a headline. Protect your\u2014and your family’s\u2014personal information by using identity protection.”,”published”:”2025-10-24T13:35:51″,”modified”:”2025-10-24T13:35:51″,”type”:”malwarebytes”,”title”:”Is AI moving faster than its safety net?”,”source”:””,”references”:””,”id”:”MALWAREBYTES:F6E19510C395FBE24F4C813ECAF5FF4B”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2025\/10\/is-ai-moving-faster-than-its-safety-net”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-24T14:08:20″,”description”:”You\u2019ve probably noticed that artificial intelligence, or AI, has been everywhere lately\u2014news, phones, apps, even in your browser. It seems like everything suddenly wants to…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-23209","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n