There is an AI browser war going on right now, see Comet (Perplexity), Atlas (ChatGPT), Claude AI Agent from Chrome etc.

They work by letting the AI continuously see everything your browser can see, such as your emails, banking details, financial habits, online shopping accounts, etc.

By doing so, they promise to be better digital assistants, so that you ask just ask the browser to do tasks such as online shopping, booking holidays, etc.

Even ignoring the severe privacy concerns, AI browsers are significantly prone to prompt injection. That is, any random webpage with hidden text can override the instructions you give it to carry out malicious attacks.