Zero-click. That's the word that should stop you mid-scroll. No phishing link to click, no attachment to open. Just an AI browser agent visiting a web page, reading content that was never meant for a human to act on, and doing exactly what that content told it to do.
That's the shape of the "PleaseFix" issue researchers disclosed and Dark Reading covered: AI browsers can be hijacked through malicious instructions hidden in web content, handing an attacker control of the browser agent with zero user interaction. According to the report, there's no simple fix yet, because the problem isn't a bug you patch. It's baked into how these agents process and act on untrusted content while they browse.
Let's talk about why that's true, and where in the stack you actually stop it.
How this class of attack works
An AI browser agent's job is to read a page, extract meaning, and take action, fill a form, click a button, summarize content, follow a link. To do that well, it treats the text on the page as a source of instructions almost as readily as it treats your prompt as one.
