{"data":{"id":"b5ca436d-d706-493f-9727-4a3cc57581a5","title":"OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts","summary":"Researchers at Zenity discovered that OpenAI's Atlas web browser and other AI-enabled browsers have serious security flaws that allow attackers to bypass protections and trick the AI into performing unauthorized actions like spamming WhatsApp contacts or making purchases on Amazon. The attacks work by embedding malicious instructions on websites that the AI system processes alongside legitimate user commands, exploiting a problem called prompt injection (tricking an AI by hiding instructions in its input) that security experts consider largely unsolved.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://www.wired.com/story/openais-browser-could-be-hijacked-to-spam-your-whatsapp-contacts/","publishedAt":"2026-08-05T23:30:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","jailbreak"],"issueType":"news","affectedPackages":null,"affectedVendors":["OpenAI","Google","Anthropic","Microsoft","Perplexity"],"affectedVendorsRaw":["OpenAI Atlas","Google","Anthropic","Microsoft","Perplexity","WhatsApp","Amazon"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-05T23:30:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","safety"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}