In the last year or so, artificial intelligence companies have rolled out a spate of web browsers equipped with AI agents. A user might ask one of these agents to plan a vacation, and it will open browser tabs to research routes and restaurants, then make reservations and add events to the user's calendar. How well it does any of this varies.

A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky actions as part of a fictional scenario, causing them to ignore…

Six AI browsers and assistants. One adversarial framing technique. Your credentials,...