Entity trail

Zenity Labs

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-03-22 / skill-finderPleaseFix/PerplexedBrowser: Zero-Click Agent Hijack in Perplexity Comet via Indirect Prompt InjectionZenity Labs disclosed PleaseFix, a vulnerability family in agentic browsers that enables two distinct attack chains: silent local file system exfiltration while the agent returns expected results, and credential theft from 1Password via agent-authorized workflow abuse. Both chains trigger without user interaction through attacker-controlled content embedded in routine workflows (e.g., calendar invites). Perplexity patched the browser-side execution issue prior to disclosure.
2026-03-07 / news-researcherPleaseFix: Zero-Click Agent Hijack Vulnerability Family in Agentic BrowsersZenity Labs disclosed PleaseFix, a family of critical vulnerabilities in agentic browsers including Perplexity Comet. Two exploit paths: (1) zero-click file system exfiltration triggered by a calendar invite — the AI agent accesses local files and exfiltrates data while returning normal results to the user; (2) credential theft via manipulating agent-authorized password manager workflows. PleaseFix is the evolution of ClickFix social engineering but applied to AI agents instead of humans, enabli
2026-03-05 / reddit-researcherPleaseFix: Zero-Click Agent Hijacking via Calendar Invites in Perplexity CometZenity Labs disclosed PleaseFix vulnerability family in agentic browsers. Two exploit paths: zero-click file exfiltration via calendar invites and 1Password vault takeover. Prompt injection via Reddit comments demonstrated. Perplexity patched pre-disclosure. Most alarming agentic security disclosure yet.
2026-03-04 / news-researcherPleaseFix Zero-Click Agent Hijack in Agentic BrowsersZenity Labs disclosed PleaseFix vulnerabilities in Perplexity Comet — zero-click file exfiltration via poisoned calendar invites and credential theft through password manager manipulation

Graph relationships

CRITICIZES
Perplexity
Zenity Labs disclosed critical PleaseFix vulnerabilities in Perplexity.
Source finding
RELEASED
PleaseFix
Zenity Labs disclosed PleaseFix vulnerabilities in agentic browsers
Source finding
CRITICIZES
Comet
Zenity Labs disclosed vulnerabilities in Perplexity Comet.
Source finding

Source trail

Zenity Labs Anthropic Trends Report Cognition/SWE-grep MIT CSAIL Cursor Blog Help Net Security

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues