Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-22 · source-backed
Zenity Labs disclosed two attack chains: silent local file system exfiltration while the agent returns expected results, and credential theft from 1Password via agent-authorized workflow abuse. Both trigger without user interaction through attacker-controlled content in routine workflows like calendar invites. Perplexity patched the browser-side execution prior to disclosure. Source
Each link below shares sources, entities, or timing with this story.
Zenity Labs released PleaseFix / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Zenity Labs released PleaseFix); both cover PleaseFix, Zero; cite the same source (Source).
Linked by a graph relationship (Zenity Labs released PleaseFix); both cover PleaseFix, Zero; cite the same source (Source).
Personal Computer released Perplexity / Shared entity: Perplexity / What happened next
Linked by a graph relationship (Personal Computer released Perplexity); both cover Perplexity; picks up the Perplexity thread on 2026-07-29.
Perplexity uses Firebird / Shared entity: Perplexity / What happened next
Linked by a graph relationship (Perplexity uses Firebird); both cover Perplexity; picks up the Perplexity thread on 2026-08-08.
Zenity Labs released PleaseFix / Same source
Linked by a graph relationship (Zenity Labs released PleaseFix); cite the same source (Source).
Perplexity partners with NVIDIA / Shared topic
Linked by a graph relationship (Perplexity partners with NVIDIA); overlapping topics (agent, attack, chain, credential).
Zenity Labs released PleaseFix / Shared topic / Tension
Linked by a graph relationship (Zenity Labs released PleaseFix); overlapping topics (agent, attack); pushes against this story (against).
Galaxy S26 uses Perplexity / Shared entity: Perplexity / Shared topic / Earlier coverage
Linked by a graph relationship (Galaxy S26 uses Perplexity); both cover Perplexity; overlapping topics (agent, attack).