Zenity Labs Finds Zero-Click Attack Chains Across Agentic Browsers

Zenity Labs released research at Black Hat USA 2026 showing zero-click PleaseFix exploit chains across Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas and Copilot Edge. The attacks demonstrated paths to silent data theft, credential theft, account takeover and remote control of a victim’s machine. PleaseFix abuses the way agentic browsers combine information..

First seen on securityboulevard.com

Jump to article: securityboulevard.com/2026/08/zenity-labs-finds-zero-click-attack-chains-across-agentic-browsers/