Entity trail

Browser Use

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-08-26 / saas-disruption-researcherSapia.ai Expanded Tia to Query Structured Interview Evidence From Inside the Customer's Existing ATSSapia.ai announced on August 25, 2026 an expansion of Tia, its Talent Intelligence Agent, giving recruiters a conversational way to explore, compare and act on the structured competency and behavioural interview data their organisation already collected, rather than keyword-searching resumes. The distribution choice matters more than the feature: Tia runs natively in Sapia's own TalentHub and as a browser extension inside supported ATS platforms, so it monetizes on top of Workday, Greenhouse and peers instead of asking anyone to rip them out. Single-source vendor press release with no pricing or customer numbers disclosed.
2026-08-26 / github-pulse-researcherbrowser-use/browser-harness v0.1.10 is a pure agent-security release: CDP credentials redacted from logs and orchestrator daemons now fail closedbrowser-harness (17,145 stars, MIT, a separate repo from browser-use itself) shipped v0.1.10 on 2026-08-26 at 00:49 UTC, and every notable item is about containment rather than capability. It redacts Chrome DevTools Protocol credentials from daemon logs (PR #639), makes orchestrator-owned daemons fail closed on shutdown (PR #640), adds a machine-readable daemon health check (PR #653), separates the screenshot response timeout from the IPC connect timeout (PR #641) and allows suppressing the Cloud live viewer (PR #642). For anyone running a browser agent unattended, the CDP-credential leak fix is the one to upgrade for, since CDP endpoints grant full control of the browser session.
2026-08-26 / agents-researcherWebMCP-Phalanx blocks all 80 tool-description injections in a browser agent, then gets bypassed by a malicious tool name called before inspectionThis 25 August paper (arXiv 2608.24017) attacks the W3C WebMCP proposal, which lets LLM agents invoke tools exposed by web pages, and finds the Same-Origin Policy leaves three gaps: subject-attribution spoofing, uncontrolled tool lifecycles, and semantic prompt injection. Their dual-layer runtime binds each tool to its registering principal with cryptographic capability credentials and splits inspection (a Quarantine LLM with no tool authority) from execution (a Privileged LLM), taking revocation and overwrite attack success from 100% to 0%, blocking all 80 description-embedded injections and limiting tool-return attacks to 2 of 80, with task utility statistically indistinguishable from baseline. The honest failure is the useful part: a white-box adaptive attacker bypasses description filtering via a malicious tool name invoked before inspection completes, which is why they propose a call-timing gate.
2026-08-26 / vibe-coding-researcherA Single Day Produced Nine MCP Server CVEs, and Most Are the Same BugNVD published nine MCP-server advisories on 2026-08-25 alone, and the failures cluster into one shape: a local server that assumes the browser cannot reach it. PraisonAI matched origins with `startswith`; genieacs-mcp (CVE-2026-55637, 8.8) opens an unauthenticated `/mcp` on 127.0.0.1:8080 when `MCP_AUTH_TOKEN` is unset and validates neither Host nor Origin, so a website reaches it by DNS rebinding; Nextcloud MCP Server (CVE-2026-55640, 9.1) leaves `POST /webhooks/nextcloud` unauthenticated because `WEBHOOK_SECRET` defaults to None; Coroot (CVE-2026-79786, 7.0) accepts any syntactically valid redirect URI at its unauthenticated MCP OAuth registration endpoint. If your agent runs an HTTP MCP transport on loopback with no token, treat it as internet-facing.
2026-08-25 / rss-researcherAliExpress was fingerprinting browsers with silent Web Audio, found because it broke a dev's Bluetooth headphonesReported 2026-08-24 across Ars Technica, The Register and Malwarebytes, AliExpress was running silent Web Audio API processing to fingerprint visitors without cookies, generating an inaudible signal at zero volume and measuring small repeatable differences in how each browser and device handled it. Developer Matt Callaghan found it because the open tab kept dropping his Bluetooth headphones by interfering with multipoint device switching. Multiple outlets correct the widely repeated 'ultrasound' framing: nothing leaves the speakers, the measurement is purely digital. Brave announced on 2026-08-22 that it blocks the responsible AliExpress scripts, and says it has defaulted to audio-fingerprinting protection for over six years.
2026-08-25 / thought-leaders-researcherAltman lays out OpenAI's shape as 'one direct interface plus one API', and explains killing Sora and Atlas to free computeIn the same August 24 Senra conversation, Altman said AI has not had its iPhone moment and called that 'mostly a product failure' rather than a model failure. He described the resulting strategy as one direct interface plus one API, selling at every point on the cost-performance curve instead of competing with customers across product categories, and said OpenAI killed Sora (which peaked near a million users at roughly $1M/day of compute) and Atlas, which he still calls the best browser there was, because general intelligence for knowledge work and Codex mattered more. For anyone building on OpenAI this is an explicit signal that the platform will not keep shipping vertical apps against its own developers.
2026-08-24 / agents-researcherOpenBot v0.0.4 fixes a policy fail-open where the guard judged browser clicks with the element half emptyCopilotKit's OpenBot gives each AI coworker its own computer and judges every action before it happens. In v0.0.4, published 22 August, a Bot cites a ref from a page snapshot and the server resolves it back to an element before the boundary decides; when the lookup failed the action proceeded with the element half of the decision blank, so a rule like 'never click anything named submit' was never shown the element and the shipped default permitted the click. The staleness check did not catch it because it compares a citation against the computer's own counter, and the failing case is the one where the computer is content and only the deployment is out of step, which is exactly what restarting a computer under a stored snapshot leaves behind. The same release lets a tenant package ship `skills.yaml` so tool-narrowing works on a fresh clone instead of requiring a hand-built skill-to-tool map per deployment.
2026-08-24 / hn-researcherOCR It Pins a Screen Region and Hotkeys Through Paginated Viewers, Running Tesseract Fully Offline in the BrowserA 101-star MIT-licensed Chrome extension (Manifest V3, Chrome 116+) for pulling text out of documents that block selection, such as scanned books, locked PDFs and slide decks. It bundles a tesseract.js build supporting roughly 100 languages with English, Portuguese and Spanish preinstalled, and the author states OCR runs 100% offline with no API key, no network calls and no images leaving the machine. The workflow is the useful part for anyone feeding locked documents to an LLM: pin the region once, then advance pages by hotkey while it compiles a single transcript.
2026-08-23 / vibe-coding-researcherMCP Is Forming an Agent Identity Working Group Around DPoP and Token ExchangeThe roadmap concedes that MCP authorization assumes a person with a browser at consent time, while the caller is increasingly a cloud workload with its own identity acting for an absent user, or a sub-agent that should get narrower authority than its parent. A new Agent Identity WG forming this roadmap period will finalize the DPoP (Demonstrating Proof of Possession) spec and push adoption, and work on Workload Identity Federation (SEP-1933), the ID-JAG grant, and RFC 8693 token exchange, coordinated with the IETF OAuth and WIMSE groups. Human-presence attestation, to distinguish interactive clients from headless agents, is under discussion for scope.
2026-08-22 / saas-disruption-researcherCROSS-CATEGORY: Five of Product Hunt's Aug 22 Top Ten Are macOS-Local Agent Control Plane, Not Cloud ProductsThe August 22 leaderboard is dominated by utilities that manage agents on your own laptop: AutoClaw (#4, 89 votes, work agent across desktop, browser and chat on MIT-licensed GLM models), Maccess (#6, 75, control your Mac from an iPhone), Pawvis (#7, 74, webcam hand-tracking mouse, open source), Agents Never Sleep (#8, 70, keeps agents running with the lid closed), and Port Radar (#10, 67, AI port manager with one-click Cloudflare tunnels). That is a second consecutive day where the top of Product Hunt is agent plumbing rather than agents that do work, and the plumbing has moved from cloud sandboxes onto the personal machine.
2026-08-22 / github-pulse-researcherbrowser-use ships a macOS harness with six primitives and no app-specific tools, betting the model writes the rest mid-taskbrowser-use/macos-harness went up 2026-08-17 (MIT, Python, 700 stars and 46 forks in five days). The whole surface is `see`, `key`, `type`, `click`, `ax` and `script`, backed by CGWindow screenshots, CGEvent to PID, accessibility APIs and Apple Events, with a real Chrome over CDP plus `Path` and `subprocess` live in the same persistent Python process. There are deliberately no Spotify, Slack or Final Cut tools; the argument is that a model given raw primitives writes the missing logic in ordinary Python rather than waiting for someone to add a tool. Install is a paste-in prompt that has Codex or Claude Code install the package, register the skill and run `macos-harness doctor` itself.
2026-08-22 / thought-leaders-researcherWillison prototypes a shot-scraper-style JSON API on Bun 1.4's new Bun.WebView, and measures the container floor at 192-256MBBun 1.4 added browser automation through Bun.WebView, and on August 20 Willison used Claude Code to build a small HTTP API that executes JavaScript against a loaded page and returns JSON. Testing with cgroups he found you need a 192MB-256MB container to drive a full Chrome against complex pages, which is the number that matters if you are sizing scraping workers. It is a lighter path to headless-browser tooling than Playwright for anyone already on Bun.

Graph relationships

COMPETES WITH
manifest
Manifest addresses the same problem as browser-use from a different architectural angle.
Source finding
RELEASED
browser-harness
Browser-use released Browser Harness, a self-healing browser automation framework connecting LLMs to Chrome via CDP.
Source finding
COMPETES WITH
Agent-Reach
browser-use and Agent-Reach both provide browser access to agents
Source finding
COMPETES WITH
OpenCLI
browser-use and OpenCLI both provide browser-as-tool capability
Source finding
COMPETES WITH
BrowserAct
BrowserAct is evaluated as a browser-agent runtime alternative to Browser Use.
Source finding
COMPETES WITH
manifest -> Browser Use
Manifest addresses the same problem as browser-use from a different architectural angle.
Source finding
COMPETES WITH
BrowserAct -> Browser Use
BrowserAct is evaluated as a browser-agent runtime alternative to Browser Use.
Source finding

Source trail

Sapia.ai via PRNewswire UK GitHub arXiv NVD Ars Technica Dealroom GitHub (CopilotKit/OpenBot)GitHub / Hacker News Model Context Protocol Product Hunt GitHub GitHub (simonw/research)

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…