New attack reveals AI browsers can be tricked into ignoring safety guardrails

AI browser makers promise convenience but downplay the risks of blurring the line between browsing and taking sensitive actions. Current safety guardrails are reactive and treat symptoms rather than root causes. New research shows that websites can lull AI browsers into a false reality where guardrails no longer apply, allowing attackers to extract code from private repositories or steal credentials from password managers.